Partner with engineering leadership to resolve the design tradeoffs that a senior engineer would escalate.
Vulnerability management
Set the bar for how the team triages, reproduces, and prioritizes bug bounty submissions and internal security reports, and step in on the hardest or highest-severity cases.
Drive remediation of systemic classes of vulnerability, not just individual findings.
Developer enablement & leadership
Own the security services and tooling consumed by product teams across our global infrastructure.
Mentor other engineers on the team, and act as the authoritative technical voice on product security across engineering leadership.
You Should Have
Typically 2–5 years of experience in product/application security or software development with a security focus — we care more about what you've built than the exact number. If you meet most of this, apply; we'd rather see your work than filter you out on a résumé line.
Strong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10)
Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools
Working knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python) and at least one major cloud provider (AWS, GCP, Azure)
Comfortable with security on-call rotation and picking up work across security disciplines when needed
Nice to Have
Hands-on experience with bug bounty platforms
Hands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar)
Experience with cloud infrastructure security and container technologies
Participation in CTF events or open-source security projects
Familiarity with threat modeling frameworks and secure SDLC best practices
Interest in contributing to internal developer security training programs
How We Work
We stay closely aligned with teammates on other continents via Slack, video, and async docs
We have the latest hardware and software, including frontier AI models on day one
We're agile, but not dogmatic — the team decides how it works best
Why This Role Is Special
Massive leverage: the conventions and champions program you build are multiplied across hundreds of engineers who never talk to you directly.
Broad authority: you set the architecture other reviews are measured against, rather than being the one measured.
You're part of PSI: the platform, security, and infrastructure teams work hand in hand, and security is treated as infrastructure with real engineering quality bars, not a policy function.
#LI-VA1
The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Our salary ranges are determined by role, level, and location. Within the range displayed, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and / or training. Base salary is just one part of our total rewards package at Flexport, which also includes bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off.
California Pay Range
$130,950—$202,125 USD
Washington Pay Range
$147,000—$183,750 USD
Colorado Pay Range
$148,210—$163,688 USD
New York City Pay Range
$147,000—$183,750 USD
Illinois Pay Range
$148,210—$163,688 USD
Commitment to Equal Opportunity
At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.
Global Data Privacy Notice for Job Candidates and Applicants
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.
