Job Overview
We are looking for a Senior Security Engineer, Detection & Response to join our Engineering team at Flexport.
What You'll Do
As a Senior Security Engineer, Detection & Response, you will own your detections end to end, writing, tuning, and maintaining them. You will work closely with the global security team to define telemetry requirements, threat hunt proactively, and respond to incidents.
Detection Engineering
- Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software: version-controlled, peer-reviewed, and shipped through CI/CD practices.
- Track detection quality metrics: coverage against MITRE ATT&CK, precision, time-to-detect.
Response & Automation
- Own incident response: triage, contain, remediate, and write retrospectives that turn incidents into systemic fixes.
- Build automation that removes toil from investigations and partner with the US-based team.
Telemetry & Partnership
- Define telemetry requirements for new systems before they ship, working with infrastructure and product teams.
- Threat hunt proactively across the estate, converting hypotheses into new detections or documented coverage.
Requirements
- Typically 5–8 years of experience in detection engineering, incident response, or threat hunting.
- Proficiency in at least one programming language (Python, Go, or similar).
- Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar).
- Practical incident response experience.
Nice to Have
- Experience treating detections as code with CI/CD, peer review, and staged rollout.
- Experience defining telemetry contracts for systems before they ship.
- Familiarity with cloud-native and Kubernetes telemetry.
- Experience with fraud or financial-crime detection patterns.
How We Work
- Regular in-person work in the San Francisco office.
- Close alignment with global teammates via Slack, video, and async docs.
- Latest hardware and software, including frontier AI models.
- Agile team workflow.
Why This Role Is Special
- End-to-end ownership of detections.
- Concrete consequences: containment decisions can impact global trade.
- Established estate with legacy telemetry gaps to close.
Location
This role is based in San Francisco, with relocation support available.
Salary
California Pay Range: $183,272-$229,091 USD Washington Pay Range: $183,272-$229,091 USD Colorado Pay Range: $138,196-$172,746 USD New York City Pay Range: $183,272-$229,091 USD Illinois Pay Range: $138,196-$172,746 USD