Product Security Engineer II

Strategy & foundations

Build guardrails and AI-accelerated patterns that make secure-by-default the path of least resistance for developers.

Build and maintain security tooling and automation that scales product security.

Respond to emerging threats.

Design-time & review

Contribute to threat modeling, design reviews, and code reviews with pragmatic guidance that balances risk against velocity.

Partner with engineering to security-review and test new features and services as they're built.

Vulnerability management

Triage, reproduce, and validate incoming bug bounty submissions and internal security reports.

Cut through SAST, secrets, and vulnerability scanner noise to prioritize real issues and guide developers to effective fixes.

Partner with development teams to drive remediation and track issues through closure.

Developer enablement

Write clear, actionable security patterns that let developers ship fast and stay secure.

Write and maintain runbooks, developer guidelines, and security documentation that scale the team's practices.

Stay current on web and cloud security trends and bring new findings into product discussions.

2–5 years of experience in product/application security or software development with a security focus.

Strong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10).

Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools.

Working knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python).

Working knowledge of at least one major cloud provider (AWS, GCP, Azure).

Hands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar).

Experience improving developer experience (DevEx) security without slowing teams down.

Clear, constructive communicator on technical risk - in writing, in code review, and in conversation.

Collaborative by default: you partner with developers, SREs, and security peers rather than handing down mandates.

Comfortable with security on-call rotation and picking up work across security disciplines when needed.

Hands-on experience with bug bounty platforms.

Experience with cloud infrastructure security (AWS, GCP, Azure) and container technologies.

Participation in CTF events or open-source security projects.

Familiarity with threat modeling frameworks and secure SDLC best practices.

Interest in contributing to internal developer security training programs.

In Amsterdam we come to the office 3 times a week to hang out, whiteboard, and ship together.

We stay closely aligned with our coworkers on other continents.

We have the latest hardware and software, including frontier AI models on day one.

We're agile, but not dogmatic. Teams decide how they work best.

Massive leverage: every improvement you ship is multiplied across hundreds of engineers and thousands of deploys a day.

Full ownership: from developer research to production rollout to measuring impact, it's yours.

You shape the paved path: the conventions you set and decisions you make become how Flexport engineering builds for years to come.

An opportunity to contribute to one of the fastest-growing companies, where you’ll have the chance to create a global impact while being a part of a thriving multinational environment.

Daily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on daily basis.

Commute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam.

25 working days as vacation days based on full time employment.

Health insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport.

A defined pension contribution scheme.

Equity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success.

Employee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members.

Parental leave benefit: Flexport is here to support you and your families in one of the most important times in life – the birth of a child! Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child.

#LI-onsite

At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.

Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.