Security Engineer, Corporate Security (San Francisco)

Flexport builds technology for global trade; companies use it to move more than $19B of goods across 112 countries a year. All security disciplines work under the umbrella of the combined PSI (Platform, Security & Infrastructure) team: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. Corporate Security owns the estate everyone at Flexport actually touches — the laptops, the identity provider, the SaaS sprawl, the browser.

Key responsibilities

• Identity & access
• SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate
• Build the detections and guardrails that catch account takeover, MFA fatigue attacks, and session token theft before they turn into incidents
• Endpoint & device lifecycle
• Configuration profiles, remediation scripts, and enforcement rules across macOS and Windows — with staged rollout and rollback built in from day one
• Maintain and improve our EDR stack's detection and response coverage across the fleet

Requirements

• Typically 2–5 years of experience in corporate, enterprise, or IT security engineering — we care more about what you've shipped than the exact number
• Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune, CrowdStrike, SentinelOne, or similar)
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta, Entra, Google Workspace, or similar)
• Comfort writing real code or scripts (Python, Go, or similar) to replace manual, ticket-driven work with automation
• Clear, practical communicator who can explain a control tradeoff to an engineer, a salesperson, and a VP without changing the facts

Location and schedule

• Onsite in San Francisco, California

Salary and benefits

US base salary $165,375 to $202,125 a year. Flexport also offers benefits; the full list is on the posting.

How to apply

Apply on the company's own site.