2 months ago
Base Salary
$165k - $202k/yr
Responsibilities
- Advance SSO coverage, phishing-resistant MFA, SCIM lifecycle automation, and least-privilege access across SaaS and cloud environments.
- Build detections and guardrails for account takeover, MFA fatigue attacks, and session token theft.
- Write and ship device policy as code, including configuration profiles, remediation scripts, and staged enforcement across macOS and Windows.
- Maintain and improve EDR detection and response coverage across the device fleet.
- Reduce SaaS risk through SSPM automation, OAuth-grant governance, shadow IT detection, and configuration-drift management.
- Own security configuration for corporate SaaS tools including Google Workspace and Slack.
- Automate device provisioning, access reviews, and vendor security questionnaires.
- Create runbooks and documentation and partner with IT and People teams to implement usable security controls.
Requirements
- Typically 2–5 years of experience in corporate, enterprise, or IT security engineering.
- Hands-on experience with modern endpoint management and EDR tooling such as Jamf, Kandji, Intune, CrowdStrike, or SentinelOne.
- Working knowledge of SAML, OIDC, and SCIM and experience with a major identity provider such as Okta, Entra, or Google Workspace.
- Ability to write production code or scripts in Python, Go, or similar for security automation.
- Clear, practical communication skills for explaining security control tradeoffs to technical and nontechnical stakeholders.
- Experience with SSPM tooling and OAuth-grant governance is preferred.
- Exposure to DLP or insider-risk tooling is preferred.
- Familiarity with Terraform for managing security configuration is preferred.
- Interest in agentic AI tools, MCP integrations, and broader corporate security or detection engineering is preferred.
Benefits
- The role is based in San Francisco with regular office work and a strong preference for local candidates or candidates willing to relocate.
- Relocation support is available for the right candidate.
- Employees receive the latest hardware and software, including frontier AI models on day one.
- The position includes bonus, equity, medical, dental, and flexible time off in addition to base salary.
About Flexport
Flexport builds a cloud-based platform for freight forwarding and customs brokerage, combining ocean, air, and truck booking with shipment tracking and analytics for importers and exporters. It earns fees for logistics services and provides supply chain visibility software that integrates with warehousing and trade compliance workflows. Founded in 2013 and headquartered in San Francisco, the privately held company operates globally across major trade lanes.