22 hours ago
Base Salary
$221k - $271k/yr
Responsibilities
- Define product and service security architecture, secure-by-default patterns, and reference implementations.
- Lead security engineering reviews for high-risk product features and guide engineering teams on security design tradeoffs.
- Build and scale the security champions program and product security training.
- Lead threat modeling and attack surface analysis across Flexport’s product surface.
- Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports.
- Drive remediation of systemic vulnerability classes and own security services and tooling consumed by product teams.
- Mentor security engineers and serve as the authoritative technical voice on product security across engineering leadership.
Requirements
- Typically 8+ years of experience in product or application security, with hands-on experience building security tools and services.
- Track record of designing security architecture that scales across many teams and services.
- Strong web application security knowledge and hands-on experience with application testing tools such as Burp Suite or OWASP ZAP.
- Software development experience building security tools in Go, Python, Java, Kotlin, TypeScript, Ruby, or a similar modern language.
- Track record of leading multi-team technical initiatives and mentoring engineers into senior roles.
- Preferred: experience scaling security champions programs, identity management and federation, IaaS cloud infrastructure, Kubernetes, containers, service-oriented architectures, bug bounty platforms, SAST tools, and code audits.
Benefits
- San Francisco-based role with regular office attendance and a strong preference for candidates in the area or willing to relocate.
- Relocation support is available for the right candidate.
- Base salary is listed separately from bonus, equity, and comprehensive benefits including medical, dental, and flexible time off.
Tech Stack
Categories
About Flexport
Flexport builds a cloud-based platform for freight forwarding and customs brokerage, combining ocean, air, and truck booking with shipment tracking and analytics for importers and exporters. It earns fees for logistics services and provides supply chain visibility software that integrates with warehousing and trade compliance workflows. Founded in 2013 and headquartered in San Francisco, the privately held company operates globally across major trade lanes.