Security Engineer, Corporate Security

Overview

Security engineering role within Flexport's Corporate Security team, focused on writing code and shipping automation to secure the laptops, identity provider, SaaS estate and browser used by everyone at Flexport.

What you'll do

• Advance identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
• Build detections and guardrails that catch account takeover, MFA fatigue attacks, and session token theft.
• Write and ship device policy as code (configuration profiles, remediation scripts, enforcement rules) across macOS and Windows, with staged rollout and rollback built in.
• Maintain and improve EDR detection and response coverage across the fleet.
• Reduce SaaS risk at scale through SSPM tooling and automation, including detection of risky OAuth grants, shadow IT, and configuration drift across critical SaaS applications.
• Own security configuration for SaaS tools used daily (Google Workspace, Slack, and similar), and keep pace as AI agents and MCP integrations are added to that surface.
• Automate corporate security tasks that don't need a human, such as device provisioning, access reviews and vendor security questionnaires.
• Write runbooks and documentation, and partner with IT and People teams to ship controls that don't create friction that drives workarounds.

What you'll need

• Typically 2–5 years of experience in corporate, enterprise, or IT security engineering.
• Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne, or similar).
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta, Entra, Google Workspace, or similar).
• Comfort writing real code or scripts (Python, Go, or similar) to replace manual, ticket-driven work with automation.
• Clear, practical communicator who can explain a control tradeoff to an engineer, a salesperson, and a VP.

Nice to have

• Experience with SSPM tooling and OAuth-grant governance.
• Exposure to DLP or insider-risk tooling.
• Familiarity with infrastructure-as-code (Terraform) for managing security configuration.
• A point of view on how agentic AI tools and MCP integrations change what corporate security needs to watch for.
• Interest in growing into a broader corporate security or detection engineering scope over time.

Details

• Location: U.S. Remote.
• Salary ranges: California $130,950–$202,125 USD; Washington $147,000–$183,750 USD; Colorado $130,950–$163,688 USD; New York City $147,000–$183,750 USD; Illinois $130,950–$163,688 USD.