3 months ago
Base Salary
$138k - $229k/yr
Responsibilities
- Build, tune, version, review, and ship detections across endpoint, identity, SaaS, and cloud environments.
- Measure detection quality using coverage against MITRE ATT&CK, precision, and time-to-detect.
- Own incident response by triaging, containing, remediating, and documenting security incidents and retrospectives.
- Build automation to reduce investigation toil and coordinate incident context across global teams.
- Define telemetry requirements for new systems and partner with infrastructure and product teams to close visibility gaps.
- Proactively threat hunt across the environment and convert findings into detections or documented coverage.
- Participate in a follow-the-sun pager rotation and work through incidents and detection design with the San Francisco team.
Requirements
- Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, including hands-on detection writing and tuning.
- Proficiency in at least one programming language, such as Python or Go, and ability to write production-grade detection and automation code.
- Experience with a modern SIEM or detection pipeline such as Panther, Elastic, or Splunk, including shipping and tuning production detection logic.
- Practical incident response experience leading or playing a major role in triaging and closing real security incidents.
- Experience with detections as code, CI/CD, peer review, and staged rollout is preferred.
- Experience defining telemetry contracts before systems ship is preferred.
- Ability to critically evaluate and validate AI-assisted work is preferred.
- Familiarity with cloud-native and Kubernetes telemetry is preferred.
- Experience with fraud or financial-crime detection patterns is preferred.
Benefits
- Regular in-person work from the San Francisco office; relocation support is available for the right candidate.
- Follow-the-sun pager rotation so team members are not paged at 3am local time.
- Latest hardware and software, including frontier AI models from day one.
- Comprehensive benefits including medical, dental, flexible time off, bonus, and equity.
Tech Stack
Categories
About Flexport
Flexport builds a cloud-based platform for freight forwarding and customs brokerage, combining ocean, air, and truck booking with shipment tracking and analytics for importers and exporters. It earns fees for logistics services and provides supply chain visibility software that integrates with warehousing and trade compliance workflows. Founded in 2013 and headquartered in San Francisco, the privately held company operates globally across major trade lanes.