Senior Security Engineer, Corporate Security

About Flexport:

At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year.

The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.

Hundreds of engineers and thousands of freight operators around the world rely on Flexport's internal systems every single day to keep billions of dollars of freight moving. Keeping those systems — and the people who use them — secure is not a compliance checkbox. It's the core infrastructure for a company operating across 112 countries.

The PSI (Platform, Security & Infrastructure) team is looking for a Senior Security Engineer to own the security of Flexport's corporate environment: endpoints, identity systems, internal networks, and the SaaS estate. This is a security engineering role, not an IT support role, and not a role where you write policies and hope for the best. You'll build, automate, and be on the ground when things get real.

What You'll Do

Endpoint & SaaS security

• Own and mature our endpoint security stack (EDR) across macOS and Windows fleets, writing device policy as code — configuration profiles, remediation scripts, and enforcement rules — with staged rollout and rollback built in.
• Own security configuration and monitoring for Flexport's critical SaaS applications (Google Workspace, Slack, and similar) through SSPM tooling, catching risky OAuth grants and configuration drift before they become incidents.

Access management

• Drive Flexport's identity posture: SSO coverage, phishing-resistant MFA and passkey rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
• Lead Flexport's zero-trust journey — making sure the right people have the right access, with the right controls, verified continuously.

Detection & response

• Build and tune detection rules in our SIEM, turning signal into actionable alerts, not noise.
• Lead incident response for security events: triage, contain, remediate, and write the retrospective.

Vulnerability & risk m