Greenhouse ·
full-timeSecurity Engineer, Corporate Security
Flexport · United States
About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. All security disciplines work under the umbrella of the combined PSI (Platform, Security & Infrastructure) team: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. Corporate Security owns the estate everyone at Flexport actually touches — the laptops, the identity provider, the SaaS sprawl, the browser. Get it right and nobody notices. Get it wrong and it's the fastest way into everything else we're trying to protect. This is a security engineering role, not an IT support role. You'll spend your time writing code and shipping automation, not administering a helpdesk queue or babysitting a ticket tray. What you'll do Identity & access Advance our identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate. Build the detections and guardrails that catch account takeover, MFA fatigue attacks, and session token theft before they turn into incidents. Endpoint & device lifecycle Write and ship device policy as code — configuration profiles, remediation scripts, and enforcement rules across macOS and Windows — with staged rollout and rollback built in from day one. Maintain and improve our EDR stack's detection and response coverage across the fleet. SaaS posture Reduce SaaS risk at scale through SSPM tooling and automation , including detection of risky OAuth grants, shadow IT, and configuration drift across our critical SaaS applications. Own security configuration for the SaaS tools hundreds of Flexporters use daily (Google Workspace, Slack, and similar), and keep pace as we add AI agents and MCP integrations to that surface. Automation & enablement Automate the parts of corporate security that don't need a human — device provisioning, access reviews, vendor security questionnaires — so the team scales with headcount instead of straining against it. Write runbooks and documentation that make the rest of the team more capable , and partner with IT and People teams to ship controls that don't create the friction that drives people to workarounds. You should have Typically 2–5 years of experience in corporate, enterprise, or IT security engineering — we care more about what you've shipped than the exact number. If you meet most of this, apply; we'd rather see your work than filter you out on a résumé line. Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne, or similar). Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta, Entra, Google Workspace, or similar). Comfort writing real code or scripts (Python, Go, or similar) to replace manual, ticket-driven work with automation. Clear, practical communicator who can explain a control tradeoff to an engineer, a salesperson, and a VP without changing the facts. Nice to have Experience with SSPM tooling and OAuth-grant governance. Exposure to DLP or insider-risk tooling. Familiarity with infrastructure-as-code (Terraform) for managing security configuration. A point of view on how agentic AI tools and MCP integrations change what corporate security needs to watch for Interest in growing into a broader corporate security or detection engineering scope over time. How we work We're in the San Francisco office regularly to work through incidents and detection design in person. We stay closely aligned with teammates on other continents via Slack, video, and async docs. We have the latest hardware and software, including frontier AI models on day one. We're agile, but not dogmatic. Teams decide how they work best. Why this role is special Broad, real ownership: at this level elsewhere you might own a slice of a control; here you'll own well-defined projects end to end, from design through rollout, with support scoping the ambiguous parts. Every device policy or identity control you ship protects every Flexporter, immediately — no six-month rollout to a subset of customers. You're part of PSI: security is treated as infrastructure to build, not policy to enforce, and platform and infrastructure engineers are a Slack message away. The range
| Role | Security Engineer, Corporate Security |
|---|---|
| Company | Flexport |
| Location | United States |
| Type | full-time |
| Compensation | Not disclosed |
| Posted | 2026-09-25 |
| Deadline | Rolling |
Typical process for this type of role
A general guide — the exact steps for this specific listing may vary; check the original posting for details.
- 1ApplicationSubmit your resume through the apply link.
- 2ScreeningRecruiter reviews your background against the role.
- 3AssessmentA technical test, assignment, or coding round, depending on the role.
- 4Interview(s)One or more rounds with the hiring team.
- 5OfferOffer letter with compensation and start date.
Before you apply
0/4Security Engineer, Corporate Security at Flexport: frequently asked questions
- What is the salary for this role?
- Flexport has not stated compensation in the listing. Check the original posting or ask during the application process.
- Is the Security Engineer, Corporate Security position remote, hybrid or onsite?
- The listing gives United States as the location and does not state a work mode.
- What is the application deadline?
- Flexport has not listed a fixed deadline, so apply early in case the opening is filled.
- How do I apply for the Security Engineer, Corporate Security role?
- Use the Apply button on this page. It opens the original listing on job-boards.greenhouse.io, where you submit your application with the company.
More at Flexport
Other jobs at Flexport
- HR Generalist · Mumbai
- Senior Manager, Supply Chain Protection & Loss Intelligence · Miami, Florida, United States
- Global Operations Associate - Ocean Freight · København, Capital Region of Denmark, Denmark
- Senior Software Engineer: Platform SRE · Amsterdam, Netherlands
- Customs Associate · Amsterdam, Netherlands
Explore Related Placements
// similar opportunities
You might also like
Senior Security Engineer
Mixpanel
About Mixpanel Mixpanel is the leading product intelligence and analytics platform, trusted by more than 29,000 companies to help understand how people use the ...
Associate Solutions Engineer
Netskope
Join the Future of Security at Netskope Netskope (NASDAQ: NTSK) is a leader in modern security and networking for the cloud and AI era. We secure and accelerate...
Senior Security Engineer
Tokyodev
Senior Security Engineer...
0-1 year experience eligible.
Senior Security Engineer - Cloud Security
Pagerduty
PagerDuty, Inc. (NYSE: PD) is the global leader in AI-first digital operations. By automatically detecting, diagnosing, and remediating issues, the PagerDuty Pl...
Senior Security Engineer - Cloud Security
Pagerduty
PagerDuty, Inc. (NYSE: PD) is the global leader in AI-first digital operations. By automatically detecting, diagnosing, and remediating issues, the PagerDuty Pl...
2 days per week onsite in Atlanta office
Lead Security Compliance Engineer
Klaviyo
At Klaviyo, we value the unique backgrounds, experiences and perspectives each Klaviyo (we call ourselves Klaviyos) brings to our workplace each and every day. ...