Senior Security Engineer

At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year.

The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people.

• Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software: version-controlled, peer-reviewed, and shipped through the same CI/CD practices the rest of engineering uses.
• Track detection quality as measured quantities: coverage against MITRE ATT&CK, precision, time-to-detect.
• Own incident response: triage, contain, remediate, and write the retrospective that turns the incident into a systemic fix.
• Build automation that removes toil from investigations, and partner closely with the US-based team so context carries across time zones instead of getting lost at handoff.
• Define telemetry requirements for new systems before they ship, working with infrastructure and product teams to close visibility gaps rather than discovering them during an incident.
• Threat hunt proactively across the estate, converting hypotheses into either new detections or documented coverage.

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with real hands-on time writing and tuning detections.
• Proficiency in at least one programming language (Python, Go, or similar) and comfort writing production-grade detection and automation code.
• Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar).
• Practical incident response experience: you've led or played a major role in triaging and closing out real security incidents.

Nice to have:

• Experience treating detections as code with CI/CD, peer review, and staged rollout.
• Experience defining telemetry contracts for systems before they ship.
• A track record of critically evaluating and verifying AI-assisted work.
• Familiarity with cloud-native and Kubernetes telemetry.
• Experience with fraud or financial-crime detection patterns.

• We're in the San Francisco office regularly to work through incidents and detection design in person.
• We stay closely aligned with teammates on other continents via Slack, video, and async docs.
• We have the latest hardware and software, including frontier AI models on day one.
• We're agile, but not dogmatic. Teams decide how they work best.
• This role is based in San Francisco, and we have a strong preference for candidates who are there or willing to relocate. Relocation support is available for the right candidate.
• Base salary is just one part of our total rewards package at Flexport, which also includes bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off.