4 hours ago
Remote, United StatesMid Level / Senior
H1B sponsor
Base Salary
$131k - $202k/yr
Responsibilities
- Advance SSO coverage, phishing-resistant MFA, SCIM lifecycle automation, and least-privilege access across SaaS and cloud environments.
- Build detections and guardrails for account takeover, MFA fatigue attacks, and session token theft.
- Write and ship device policy as code, configuration profiles, remediation scripts, and enforcement rules across macOS and Windows with staged rollout and rollback.
- Maintain and improve EDR detection and response coverage across the device fleet.
- Reduce SaaS risk through SSPM tooling and automation, including risky OAuth grant, shadow IT, and configuration-drift detection.
- Own security configuration for corporate SaaS tools including Google Workspace and Slack.
- Automate device provisioning, access reviews, and vendor security questionnaires.
- Write runbooks and documentation and partner with IT and People teams to implement practical security controls.
Requirements
- Typically 2–5 years of experience in corporate, enterprise, or IT security engineering.
- Hands-on experience with modern endpoint management and EDR tooling such as Jamf, Kandji, Intune, CrowdStrike, or SentinelOne.
- Working knowledge of SAML, OIDC, and SCIM and experience with a major identity provider such as Okta, Entra, or Google Workspace.
- Ability to write production code or scripts in Python, Go, or similar languages to automate security work.
- Clear, practical communication skills for explaining security control tradeoffs to audiences ranging from engineers to executives.
- Experience with SSPM tooling and OAuth-grant governance is preferred.
- Exposure to DLP or insider-risk tooling is preferred.
- Familiarity with Terraform for managing security configuration is preferred.
- Interest in broader corporate security or detection engineering scope is preferred.
Benefits
- Remote role, indicated by the posting’s #LI-Remote designation.
- Comprehensive benefits including medical, dental, and flexible time off.
- Total rewards package also includes bonus and equity.
- Latest hardware and software, including frontier AI models on day one.
- Broad end-to-end project ownership within the Platform, Security & Infrastructure team.
About Flexport
Flexport builds a cloud-based platform for freight forwarding and customs brokerage, combining ocean, air, and truck booking with shipment tracking and analytics for importers and exporters. It earns fees for logistics services and provides supply chain visibility software that integrates with warehousing and trade compliance workflows. Founded in 2013 and headquartered in San Francisco, the privately held company operates globally across major trade lanes.