Security Engineer, Corporate Security

At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year.

The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.

Hundreds of engineers and thousands of freight operators around the world rely on Flexport's internal systems every single day to keep billions of dollars of freight moving. Keeping those systems — and the people who use them — secure is not a compliance checkbox. It's the core infrastructure for a company operating across 112 countries.

The PSI (Platform, Security & Infrastructure) team is looking for a Senior Security Engineer to own the security of Flexport's corporate environment: endpoints, identity systems, internal networks, and the SaaS estate. This is a security engineering role, not an IT support role, and not a role where you write policies and hope for the best. You'll build, automate, and be on the ground when things get real.

Endpoint & SaaS security

Access management

Detection & response

Vulnerability & risk management

Security enablement & leadership

• Typically 5–8 years of experience in enterprise security, corporate IT security, or information security engineering — we care more about what you've built than the exact number. If you meet most of this, apply.
• Strong working knowledge of endpoint security tooling: DLP (Cyberhaven, Purview, Varonis, or similar) and EDR (CrowdStrike, SentinelOne, or similar).
• Practical SIEM experience, writing detection logic, triaging alerts, and reducing false positive noise.
• Experience leading or playing a significant role in security incident response.
• Working knowledge of cloud environments (AWS, GCP, or Azure).
• Experience with network security in a cloud-first environment (ZTNA, SASE, DNS filtering).
• Hands-on experience with infrastructure-as-code tools (Terraform) for security configuration management.
• Familiarity with SCIM, OIDC, and fine-grained authorization at scale.
• Experience working in a high-growth, global technology company.
• Scripting skills in Python, Bash, or similar, for automating detection, response, and operational tasks.
• Exposure to privacy regulations relevant to a European and global context (GDPR, etc.).

Why This Role Is Special