SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Flexport is a global commerce platform that moves over $19B in merchandise annually across 112 countries. This Senior Security Engineer role focuses on Detection & Response within a distributed security team operating on a follow-the-sun pager rotation.
You will own detection engineering end-to-end: writing, tuning, and maintaining detections across endpoint, identity, SaaS, and cloud environments. Detections are treated as production software with version control, peer review, and CI/CD practices. You'll track detection quality metrics including MITRE ATT&CK coverage, precision, and time-to-detect.
Incident response responsibilities include triage, containment, remediation, and post-incident retrospectives that drive systemic improvements. You'll build automation to reduce investigation toil and partner with global teammates to maintain context across time zones.
Telemetry and partnership work involves defining logging requirements for new systems before deployment, closing visibility gaps proactively, and conducting threat hunts across the infrastructure estate.
The role requires 5–8 years of hands-on experience in detection engineering, incident response, or threat hunting. You must be proficient in at least one programming language (Python, Go, or similar) and have shipped detection logic in modern SIEMs (Panther, Elastic, Splunk, or equivalent). Practical incident response experience leading real security incidents is essential.
Nice-to-have skills include treating detections as code with CI/CD workflows, defining telemetry contracts upfront, critical evaluation of AI-assisted work, cloud-native and Kubernetes telemetry familiarity, and fraud/financial-crime detection patterns.
Flexport provides latest hardware and software, including frontier AI models. The team is agile and collaborative, with regular in-person work in San Francisco for incident response and detection design, supplemented by async documentation and video collaboration with distributed teammates.
