Security Engineer, Product Security & AppSec (San Francisco)

Flexport builds technology for global trade; companies use it to move more than $19B of goods across 112 countries a year. As a Security Engineer on the Product Security team you make Flexport's products secure by design, from architecture and threat modelling to vulnerability management.

Key responsibilities

• Review product features for security risks and run threat models
• Test applications with Burp Suite, OWASP ZAP and similar tools
• Help triage bug bounty and vulnerability reports
• Build security tools and secure-by-default patterns
• Join the security on-call rotation

Requirements

• Typically 2 to 5 years in product or application security, or security-focused development
• Strong grasp of web security and the OWASP Top 10
• Burp Suite, OWASP ZAP or browser developer tools
• A modern language such as Ruby, Java, TypeScript or Python, and a major cloud
• Comfortable with security on-call

Location and schedule

• Onsite at Flexport's San Francisco office

Salary and benefits

US base salary $165,375 to $202,125 a year, depending on location. Flexport also offers benefits; the full list is on the posting.

How to apply

Apply on the company's own site.