Senior Security Engineer, Corporate Security

Start free →

Or apply yourself on the official page →

About the role

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. Hundreds of engineers and thousands of freight operators around the world rely on Flexport's internal systems every single day to keep billions of dollars of freight moving. Keeping those systems — and the people who use them — secure is not a compliance checkbox. It's the core infrastructure for a company operating across 112 countries. The PSI (Platform, Security & Infrastructure) team is looking for a Senior Security Engineer to own the security of Flexport's corporate environment: endpoints, identity systems, internal networks, and the SaaS estate. This is a security engineering role, not an IT support role, and not a role where you write policies and hope for the best. You'll build, automate, and be on the ground when things get real. What You'll Do Endpoint & SaaS security • Own and mature our endpoint security stack (EDR) across macOS and Windows fleets , writing device policy as code — configuration profiles, remediation scripts, and enforcement rules — with staged rollout and rollback built in. • Own security configuration and monitoring for Flexport's critical SaaS applications (Google Workspace, Slack, and similar) through SSPM tooling, catching risky OAuth grants and configuration drift before they become incidents. Access management • Drive Flexport's identity posture: SSO coverage, phishing-resistant MFA and passkey rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate. • Lead Flexport's zero-trust journey — making sure the right people have the right access, with the right controls, verified continuously. Detection & response • Build and tune detection rules in our SIEM , turning signal into actionable alerts, not noise. • Lead incident response for security events: triage, contain, remediate, and write the retrospective. Vulnerability & risk management • Run regular assessments of corporate endpoints and prioritize findings by real business risk. • Manage vendor and third-party security reviews , working with procurement and legal to evaluate risk before it lands in our environment. Security enablement & leadership • Partner with IT, Engineering, and People teams to embed security into the way we work without creating friction that drives people to workarounds. • Develop and maintain runbooks, playbooks, and internal documentation that make the whole team more capable, and mentor engineers earlier in their career. • Bring a point of view on how agentic AI tools and browser-based AI assistants change what corporate security needs to watch for . You Should Have • Typically 5–8 years of experience in enterprise security, corporate IT security, or information security engineering — we care more about what you've built than the exact number. If you meet most of this, apply. • Strong working knowledge of endpoint security tooling: DLP (Cyberhaven, Purview, Varonis, or similar) and EDR (CrowdStrike, SentinelOne, or similar). • Practical SIEM experience , writing dete

View the official posting →