SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Flexport is a global logistics and commerce platform that moves over $19B of merchandise across 112 countries annually. The PSI (Platform, Security & Infrastructure) team is seeking a Senior Security Engineer to own the security of Flexport's corporate environment, including endpoints, identity systems, internal networks, and SaaS applications.
This is a hands-on security engineering role focused on building, automating, and operationalizing corporate security at scale. You will own the complete corporate security posture end-to-end, not just manage policies or compliance checkboxes.
**Key Responsibilities:**
Endpoint & SaaS Security: Own and mature the endpoint security stack (EDR) across macOS and Windows fleets, writing device policy as code with staged rollout and rollback. Manage security configuration and monitoring for critical SaaS applications (Google Workspace, Slack, etc.) using SSPM tooling to catch risky OAuth grants and configuration drift.
Access Management: Drive Flexport's identity posture including SSO coverage, phishing-resistant MFA and passkey rollout, SCIM lifecycle automation, and least-privilege access. Lead the zero-trust journey to ensure continuous verification of access controls.
Detection & Response: Build and tune detection rules in the SIEM to reduce noise and create actionable alerts. Lead incident response for security events including triage, containment, remediation, and retrospectives.
Vulnerability & Risk Management: Run regular assessments of corporate endpoints and prioritize findings by business risk. Manage vendor and third-party security reviews in collaboration with procurement and legal.
Security Enablement & Leadership: Partner with IT, Engineering, and People teams to embed security without creating friction. Develop runbooks, playbooks, and documentation. Mentor junior engineers and provide perspective on emerging threats from agentic AI tools and browser-based AI assistants.
Flexport operates a hybrid model with 3 days per week in office. The company sponsors visas for qualified candidates and offers competitive benefits including equity, health insurance, pension contributions, 25 vacation days, and parental leave.
**Requirements:**
- Typically 5–8 years of experience in enterprise security, corporate IT security, or information security engineering (experience and accomplishments valued over exact tenure)
- Strong working knowledge of endpoint security tooling: DLP (Cyberhaven, Purview, Varonis, or similar) and EDR (CrowdStrike, SentinelOne, or similar)
- Practical SIEM experience: writing detection logic, triaging alerts, and reducing false positive noise
- Experience leading or playing a significant role in security incident response
- Working knowledge of cloud environments (AWS, GCP, or Azure)
**Nice to Have:**
- Network security experience in cloud-first environments (ZTNA, SASE, DNS filtering)
- Hands-on experience with infrastructure-as-code tools (Terraform) for security configuration management
- Familiarity with SCIM, OIDC, and fine-grained authorization at scale
- Experience in high-growth, global technology companies
- Scripting skills in Python, Bash, or similar for automating detection, response, and operational tasks
- Exposure to privacy regulations relevant to European and global context (GDPR, etc.)
