Security Engineer, Corporate Security

Typically 2–5 years of experience in corporate, enterprise, or IT security engineering — we care more about what you've shipped than the exact number. If you meet most of this, apply; we'd rather see your work than filter you out on a résumé line.

Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne, or similar).

Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta, Entra, Google Workspace, or similar).

Comfort writing real code or scripts (Python, Go, or similar) to replace manual, ticket-driven work with automation.

Clear, practical communicator who can explain a control tradeoff to an engineer, a salesperson, and a VP without changing the facts.

Experience with SSPM tooling and OAuth-grant governance.

Exposure to DLP or insider-risk tooling.

Familiarity with infrastructure-as-code (Terraform) for managing security configuration.

A point of view on how agentic AI tools and MCP integrations change what corporate security needs to watch for

Interest in growing into a broader corporate security or detection engineering scope over time.

We're in the San Francisco office regularly to work through incidents and detection design in person.

We stay closely aligned with teammates on other continents via Slack, video, and async docs.

We have the latest hardware and software, including frontier AI models on day one.

We're agile, but not dogmatic. Teams decide how they work best.

Broad, real ownership: at this level elsewhere you might own a slice of a control; here you'll own well-defined projects end to end, from design through rollout, with support scoping the ambiguous parts.

Every device policy or identity control you ship protects every Flexporter, immediately — no six-month rollout to a subset of customers.

You're part of PSI: security is treated as infrastructure to build, not policy to enforce, and platform and infrastructure engineers are a Slack message away.

At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.

Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.