Senior Detection & Response Engineer — End-to-End Security

Flexport; Chicago (IL); On-site; USD 138,000 - 173,000; Full time

Benefits offered by this job

Medical and dental benefits

Flexible time off

Job summary

Flexport is seeking an experienced Detection Engineer to own detections end‑to‑end, write and tune them, and participate in a follow-the-sun pager rotation. You will define telemetry, hunt threats, and build automation to reduce toil across global teams.

You should have hands-on experience with Python or Go, strong incident-response capabilities, and a track record of shipping production detection logic in a cloud/Kubernetes environment.

Qualifications

• 5–8 years of experience in detection engineering, incident response, or threat hunting.
• Proficiency in at least one programming language (Python, Go, or similar).
• Experience with a modern SIEM (Panther, Elastic, Splunk) and production detections.
• Practical incident response experience.

Responsibilities

• Build and tune detections across endpoint, identity, SaaS, and cloud, as code with CI/CD practices.
• Own incident response: triage, containment, remediation, and retrospective writing.
• Build automation to remove toil from investigations and ensure cross-timezone context.
• Define telemetry requirements for new systems before they ship.
• Threat hunt proactively to expand detections and coverage.

Skills

Python

Go

Detections as code

CI/CD

Incident response

Threat hunting

Cloud/Kubernetes telemetry

Tools

Panther

Elastic

Splunk

Kubernetes

Job description

Flexport is seeking an experienced Detection Engineer to own detections end‑to‑end, write and tune them, and participate in a follow-the-sun pager rotation. You will define telemetry, hunt threats, and build automation to reduce toil across global teams.

You should have hands-on experience with Python or Go, strong incident-response capabilities, and a track record of shipping production detection logic in a cloud/Kubernetes environment.