Staff Security Engineer, Product Security
Flexport · U.S. Remote
About this role
## About Flexport At Flexport, we believe global trade can move the human race forward. Our mission is to make global commerce so easy there will be more of it—powered by innovative technology and exceptional people. Flexport technology helps companies move more than **$19B** of merchandise across **112 countries** each year. ## What You’ll Do - **Architecture & strategy** - Define security architecture for Flexport’s products and services, and establish patterns/reference implementations that make **secure-by-default** the easiest path. - Lead security engineering reviews for the highest-risk product features, and set the bar for what “good” looks like in reviews you don’t personally run. - Build and scale a **security champions program** and **product security training** to extend your judgment across teams. - **Design-time & review** - Lead domain-specific **threat modeling** and **attack surface analysis** across the product surface (not just individual features). - Partner with engineering leadership to resolve design tradeoffs that a senior engineer would escalate. - **Vulnerability management** - Set the bar for how the team triages, reproduces, and prioritizes **bug bounty** submissions and internal security reports; step in on the hardest/highest-severity cases. - Drive remediation of **systemic classes** of vulnerabilities, not just individual findings. - **Developer enablement & leadership** - Own the security services and tooling consumed by product teams across global infrastructure. - Mentor engineers and act as the authoritative technical voice on product security across engineering leadership. ## You Should Have - Typically **8+ years** of experience in product/application security, with real hands-on time building security tools and services (we care more about what you’ve built than the exact number). - A track record of designing security architecture that scales across many teams and services.
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.