SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Flexport is a global commerce platform that moves over $19B in merchandise annually across 112 countries. This Security Engineer role sits within Corporate Security (PSI team) and focuses on building and scaling identity, endpoint, and SaaS security controls that protect the entire company.
Key responsibilities include:
**Identity & Access Management**: Advance Flexport's identity posture by expanding SSO coverage, rolling out phishing-resistant MFA, automating SCIM lifecycle management, and implementing least-privilege access across SaaS and cloud infrastructure. Build detections and guardrails to catch account takeover, MFA fatigue attacks, and session token theft before they escalate.
**Endpoint & Device Lifecycle**: Write and ship device policy as code (configuration profiles, remediation scripts, enforcement rules) for macOS and Windows with staged rollout and rollback capabilities. Maintain and improve the EDR stack's detection and response coverage across the fleet.
**SaaS Posture Management**: Reduce SaaS risk at scale using SSPM tooling and automation to detect risky OAuth grants, shadow IT, and configuration drift. Own security configuration for widely-used SaaS tools (Google Workspace, Slack) and adapt as the company integrates AI agents and MCP tools.
**Automation & Enablement**: Automate repetitive corporate security work—device provisioning, access reviews, vendor questionnaires—so the team scales efficiently. Write runbooks and documentation that empower teammates and partner with IT and People teams to ship controls that don't create friction.
You'll have broad, real ownership of well-defined projects end-to-end, from design through rollout. Every control you ship protects every employee immediately. The team works in San Francisco regularly for incident response and detection design, with async collaboration across continents. You'll have access to frontier AI models and latest hardware/software on day one.
