11 hours ago
Amsterdam, NetherlandsSenior
Responsibilities
- Build, tune, version-control, peer-review, and deploy detections across endpoint, identity, SaaS, and cloud environments.
- Measure detection quality using coverage, precision, and time-to-detect metrics.
- Own EMEA-hours incident response, including triage, containment, remediation, and retrospectives.
- Build automation to reduce investigation toil and coordinate incident context across global teams.
- Define telemetry requirements for new systems and close visibility gaps with infrastructure and product teams.
- Conduct proactive threat hunting and convert findings into detections or documented coverage.
Requirements
- Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with hands-on detection writing and tuning.
- Proficiency in at least one programming language such as Python or Go, with the ability to write production-grade detection and automation code.
- Experience with a modern SIEM or detection pipeline such as Panther, Elastic, or Splunk.
- Practical experience leading or playing a major role in triaging and resolving real security incidents.
- Experience with detections as code, CI/CD, peer review, and staged rollout is preferred.
- Experience defining telemetry contracts, evaluating AI-assisted work, handling EU data residency and cross-border data considerations, or detecting fraud and financial crime is preferred.
Benefits
- Amsterdam employees work from the office three days per week.
- Flexport sponsors visas for the right candidate.
- Daily catered lunches, breakfast, snacks, and soft drinks are available in the office.
- Flexport covers commuting costs for employees living outside Amsterdam.
- Full-time employees receive 25 working days of vacation.
- Flexport fully pays the monthly premium for its collective health insurance plan.
- Defined pension contribution scheme, equity program, employee assistance program, and parental leave are provided.
- Employees receive the latest hardware and software and collaborate with global teams.
About Flexport
Flexport builds a cloud-based platform for freight forwarding and customs brokerage, combining ocean, air, and truck booking with shipment tracking and analytics for importers and exporters. It earns fees for logistics services and provides supply chain visibility software that integrates with warehousing and trade compliance workflows. Founded in 2013 and headquartered in San Francisco, the privately held company operates globally across major trade lanes.