Senior End-to-End Detection & Response Engineer

Flexport; Denver (CO); On-site; USD 138,000 - 173,000; Full time

Job summary

Flexport is seeking an experienced Detection Engineer to own detections end to end across endpoints, identities, SaaS, and cloud. You will write, tune, and operate detections with CI/CD practices and own incident response, containment, and remediation with a focus on continuous improvement.

Telemetry definitions and proactive threat hunting are core responsibilities. You will collaborate with global teams to ensure signals travel across time zones, reduce toil, and improve detection quality

Qualifications

• 5–8 years of experience in detection engineering, incident response, or threat hunting.
• Proficiency in at least one programming language (Python, Go, or similar).
• Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk).
• Practical incident response experience leading or driving triage and closure.

Responsibilities

• Build and tune detections across endpoint, identity, SaaS, and cloud as code.
• Own incident response: triage, contain, remediate, and write retrospectives.
• Build automation to remove toil and ensure cross-timezone context.
• Define telemetry requirements and proactively hunt threats across the estate.

Skills

Detection engineering

Incident response

Threat hunting

Python/Go

SIEM experience

Cloud telemetry

Kubernetes telemetry

Tools

Panther

Elastic

Splunk

Job description

Flexport is seeking an experienced Detection Engineer to own detections end to end across endpoints, identities, SaaS, and cloud. You will write, tune, and operate detections with CI/CD practices and own incident response, containment, and remediation with a focus on continuous improvement.

Telemetry definitions and proactive threat hunting are core responsibilities. You will collaborate with global teams to ensure signals travel across time zones, reduce toil, and improve detection quality