22 hours ago
Base Salary
$148k - $271k/yr
Responsibilities
- Define security architecture, patterns, and reference implementations for Flexport products and services.
- Lead security engineering reviews for high-risk product features and establish review standards across engineering.
- Build and scale the security champions program and product security training.
- Lead threat modeling and attack-surface analysis across the product surface.
- Partner with engineering leadership on complex security design tradeoffs.
- Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports.
- Drive remediation of systemic vulnerability classes and handle the highest-severity cases.
- Own security services and tooling consumed by product teams across global infrastructure.
- Mentor security engineers and act as the authoritative product security voice across engineering leadership.
Requirements
- Typically 8+ years of experience in product or application security, with hands-on experience building security tools and services.
- Experience designing security architecture that scales across many teams and services.
- Strong web application security knowledge and hands-on experience with application testing tools such as Burp Suite or OWASP ZAP.
- Software development experience building security tools in a modern language such as Go, Python, Java, Kotlin, TypeScript, or Ruby.
- Track record of leading multi-team technical initiatives and mentoring engineers into senior roles.
- Experience with security champions programs, identity management and federation, cloud infrastructure, Kubernetes, containers, service-oriented architectures, bug bounty platforms, SAST tools, or code audits is preferred.
Benefits
- Remote work is indicated by the #LI-Remote posting tag.
- Benefits include medical and dental coverage, flexible time off, bonus, equity, and comprehensive total rewards.
- Employees receive the latest hardware and software and collaborate through Slack, video, and asynchronous documentation.
Tech Stack
Categories
About Flexport
Flexport builds a cloud-based platform for freight forwarding and customs brokerage, combining ocean, air, and truck booking with shipment tracking and analytics for importers and exporters. It earns fees for logistics services and provides supply chain visibility software that integrates with warehousing and trade compliance workflows. Founded in 2013 and headquartered in San Francisco, the privately held company operates globally across major trade lanes.