Senior Security Engineer — Zero-Trust, IR & IAM Leader

Flexport; United States; Hybrid; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Equity program

Parental leave

Job summary

Flexport is seeking a Senior Security Engineer to own the security of the corporate environment, including endpoints, identity systems, and the SaaS estate. You will write device policy, manage SSPM for apps like Google Workspace and Slack, and lead zero-trust initiatives while working with IT, Engineering, and People teams.

You will build detection rules in the SIEM, drive incident response, and perform regular risk assessments, evaluating vendor security and regulatory requirements across a

Qualifications

• Typically 5–8 years of experience in enterprise security or security engineering.
• Experience with endpoint security tooling and monitoring.
• Experience leading security incident response and risk assessments.

Responsibilities

• Own and mature endpoint security stack (EDR) across macOS and Windows fleets.
• Own security configuration for critical SaaS apps via SSPM tooling.
• Drive identity posture: SSO coverage, phishing-resistant MFA, and least-privilege access.
• Build and tune SIEM rules; lead incident response.
• Run regular vulnerability/risk assessments; manage vendor reviews.
• Develop runbooks, playbooks, and security documentation; mentor engineers.

Skills

Endpoint security

SIEM & detection

Incident response

Cloud security

Infrastructure as code

Zero trust / access control

Scripting (Python/Bash)

GDPR / privacy regulations

Vendor security reviews

Tools

CrowdStrike / EDR

DLP tools (Cyberhaven, Purview, Varonis)

SSPM tooling

SIEM

Job description

Flexport is seeking a Senior Security Engineer to own the security of the corporate environment, including endpoints, identity systems, and the SaaS estate. You will write device policy, manage SSPM for apps like Google Workspace and Slack, and lead zero-trust initiatives while working with IT, Engineering, and People teams.

You will build detection rules in the SIEM, drive incident response, and perform regular risk assessments, evaluating vendor security and regulatory requirements across a