Senior Security Engineer, Detection & Response (Remote US)

Flexport builds technology for global trade; companies use it to move more than $19B of goods across 112 countries a year. There is no MSSP and no tier-1 queue here. Detection & Response engineers own their detections end to end: you write them, you tune them, and your team is paged when they fire.

Key responsibilities

• Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software: version-controlled, peer-reviewed
• Track detection quality as measured quantities: coverage against MITRE ATT&CK, precision, time-to-detect
• Triage, contain, remediate, and write the retrospective that turns the incident into a systemic fix
• Build automation that removes toil from investigations, and partner closely with the US-based team so context carries across time zones instead of
• Define telemetry requirements for new systems before they ship, working with infrastructure
• Threat hunt proactively across the estate, converting hypotheses into either new detections or documented coverage

Requirements

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with real hands-on time writing
• Proficiency in at least one programming language (Python, Go, or similar) and comfort writing production-grade detection and automation code
• Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar)
• Led or played a major role in triaging and closing out real security incidents

Remote details

• Remote role in the United States
• Build automation that removes toil from investigations, and partner closely with the US-based team so context carries across time zones instead of getting lost at handoff

Salary and benefits

US base salary $138,196 to $252,000 a year. Flexport also offers benefits; the full list is on the posting.

How to apply

Apply on the company's own site.