About the company
Flexport is shaping the future of a $10T global trade industry with technology and exceptional people. Companies of all sizes use Flexport technology to move more than $19B of merchandise across 112 countries a year.
Responsibilities
- Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software: version-controlled, peer-reviewed, shipped through CI/CD
- Track detection quality: coverage against MITRE ATT&CK, precision, time-to-detect
- Own incident response: triage, contain, remediate, write retrospectives
- Build automation that removes toil from investigations
- Define telemetry requirements for new systems before they ship
- Threat hunt proactively across the estate
Requirements
- 5–8 years of experience in detection engineering, incident response, or threat hunting
- Proficiency in at least one programming language (Python, Go, or similar)
- Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar)
- Practical incident response experience
Nice to have
- Treating detections as code with CI/CD, peer review, staged rollout
- Defining telemetry contracts before systems ship
- Cloud-native and Kubernetes telemetry
- Fraud or financial-crime detection patterns
Conditions
- U.S. Remote
- Based in San Francisco with strong preference for candidates there or willing to relocate; relocation support available
- California Pay Range: $138,196 - $252,000 USD
- Washington Pay Range: $183,272 - $229,091 USD
- Colorado Pay Range: $138,196
- Benefits: bonus, equity, medical, dental, flexible time off