23 hours ago
Remote, United StatesMid Level / Senior
H1B sponsor
Base Salary
$131k - $202k/yr
Responsibilities
- Define product and service security architecture, patterns, and reference implementations.
- Lead security reviews for high-risk product features and advise engineering leadership on security tradeoffs.
- Lead threat modeling and attack surface analysis across Flexport’s products.
- Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports.
- Drive remediation of systemic vulnerability classes.
- Own security services and tooling used by product teams across the global infrastructure.
- Build and scale the security champions and product security training programs.
- Mentor security engineers and serve as the technical authority for product security across engineering leadership.
- Participate in a security on-call rotation.
Requirements
- Typically 2–5 years of experience in product/application security or software development with a security focus.
- Strong understanding of web application security principles and common attack vectors, including the OWASP Top 10.
- Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools.
- Working knowledge of at least one modern programming language such as Ruby, Java, Kotlin, TypeScript, JavaScript, or Python.
- Working knowledge of at least one major cloud provider: AWS, GCP, or Azure.
- Preferred: hands-on experience with bug bounty platforms.
- Preferred: experience with SAST tools such as Cycode, Semgrep, Snyk, or similar.
- Preferred: experience with cloud infrastructure security and container technologies.
- Preferred: participation in CTF events or open-source security projects.
- Preferred: familiarity with threat modeling frameworks and secure SDLC practices.
- Preferred: interest in contributing to internal developer security training programs.
Benefits
- Base salary ranges vary by US location: California $130,950–$202,125; Washington $147,000–$183,750; Colorado $148,210–$163,688; New York City $147,000–$183,750; Illinois $148,210–$163,688.
- Total rewards include bonus, equity, medical, dental, and flexible time off.
- The role collaborates with teammates across continents using Slack, video, and asynchronous documentation.
- The position includes a security on-call rotation.
Categories
About Flexport
Flexport builds a cloud-based platform for freight forwarding and customs brokerage, combining ocean, air, and truck booking with shipment tracking and analytics for importers and exporters. It earns fees for logistics services and provides supply chain visibility software that integrates with warehousing and trade compliance workflows. Founded in 2013 and headquartered in San Francisco, the privately held company operates globally across major trade lanes.