Security Engineer, Corporate Security

Flexport · San Francisco, California, United Statesmid

In short

▸Ingeniero de seguridad corporativa que gestiona identidad, dispositivos y SaaS con automatización.
▸Se enfoca en prevenir ataques mediante detección, políticas as code y seguridad de acceso mínimo.
▸Destacado: Saltar el trabajo manual con automatización y código real para escalar sin fricción.

Clear, practical communicator who can explain a control tradeoff to an engineer, a salespe

In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

What they ask for

✓2–5 años de experiencia en seguridad corporativa o de TI
✓Experiencia práctica con herramientas de gestión de dispositivos y EDR
✓Conocimiento de protocolos de identidad (SAML, OIDC, SCIM) y un IDP
✓Capacidad para escribir código (Python, Go, etc.) para automatizar tareas
✓Comunicación clara para distintos niveles del negocio
✓Enfoque orientado a resultados con enfoque en seguridad operativa

Don't tick every box? That's normal — your free dossier shows your gaps and how to cover them in the interview.

JamfKandjiIntuneCrowdStrikeSentinelOneOktaEntraGoogle WorkspaceSlackSSPM

Who should you write to at Flexport?

Your free dossier identifies the people who'd interview you — their background, what they value, and how to reach out so you stand out before applying.

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. What you'll do • Identity & access • Advance our identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate. • Build the detections and guardrails that catch account takeover, MFA fatigue attacks, and session token theft before they turn into incidents. • Endpoint & device lifecycle • Write and ship device policy as code — configuration profiles, remediation scripts, and enforcement rules across macOS and Windows — with staged rollout and rollback built in from day one. • Maintain and improve our EDR stack's detection and response coverage across the fleet. • SaaS posture • Reduce SaaS risk at scale through SSPM tooling and automation , including detection of risky OAuth grants, shadow IT, and configuration drift across our critical SaaS applications. • Own security configuration for the SaaS tools hundreds of Flexporters use daily (Google Workspace, Slack, and similar), and keep pace as we add AI agents and MCP integrations to that surface. • Automation & enablement • Automate the parts of corporate security that don't need a human — device provisioning, access reviews, vendor security questionnaires — so the team scales with headcount instead of straining against it. • Write runbooks and documentation that make the rest of the team more capable , and partner with IT and People teams to ship controls that don't create the friction that drives people to workarounds. You should have • Typically 2–5 years of experience in corporate, enterprise, or IT security engineering — we care more about what you've shipped than the exact number. If you meet most of this, apply; we'd rather see your work than filter you out on a résumé line. • Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne, or similar). • Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta, Entra, Google Workspace, or similar). • Comfort writing real code or scripts (Python, Go, or similar) to replace manual, ticket-driven work with automation. • Clear, practical communicator who can explain a control tradeoff to an engineer, a salesperson, and a VP without changing the facts. Nice to have • Experience with SSPM tooling and OAuth-grant governance. • Exposure to DLP or insider-risk tooling. • Familiarity with infrastructure-as-code (Terraform) for managing security configuration. • A point of view on how agentic AI tools and MCP integrations change what corporate security needs to watch for • Interest in growing into a broader corp

Don't apply unprepared

We research who's interviewing you, tailor your CV and rehearse you live — first one free.