Senior Security Engineer, Detection & Response

• Define telemetry requirements for new systems before they ship , working with infrastructure and product teams to close visibility gaps rather than discovering them during an incident.

• Threat hunt proactively across the estate , converting hypotheses into either new detections or documented coverage.

You Should Have

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with real hands-on time writing and tuning detections. We care more about what you've built than the exact number.

• Proficiency in at least one programming language (Python, Go, or similar) and comfort writing production-grade detection and automation code.

• Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar). What matters is that you've shipped and tuned detection logic in production.

• Practical incident response experience : you've led or played a major role in triaging and closing out real security incidents.

Nice to have

• Experience treating detections as code with CI/CD, peer review, and staged rollout.

• Experience defining telemetry contracts for systems before they ship, rather than retrofitting logging after an incident.

• A track record of critically evaluating and verifying AI-assisted work - testing, source-checking, validation - rather than trusting agent output by default. If you haven’t already spotted the em dashes in this job description and already thought about where the hiring manager (hi!) has put hands on keyboard and compared that to where they let the LLM watermarks through, you might not be the right person for the job.

• Familiarity with cloud-native and Kubernetes telemetry.

• Experience with fraud or financial-crime detection patterns.

How we work

• We stay closely aligned with teammates on other continents via Slack, video, and async docs.

• We have the latest hardware and software, including frontier AI models on day one.

• We're agile, but not dogmatic. Teams decide how they work best.

Why this role is special

• You own your detections end to end, no MSSP, no tier-1 queue, no handing your work to someone else to triage.

• The consequences here are physical, not abstract: a containment decision can stop a customs filing or freight actually moving, which makes the stakes concrete in a way a SaaS control plane rarely is.

• You'll inherit a real, established estate with legacy telemetry gaps to close, genuinely underexplored surface area, not a well-mined problem.

#LI-Remote

#LI-VA1

The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Our salary ranges are determined by role, level, and location. Within the range displayed, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and / or training. Base salary is just one part of our total rewards package at Flexport, which also includes bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off.

California Pay Range

$138,196 — $252,000 USD

Washington Pay Range

$183,272 — $229,091 USD

Colorado Pay Range

$138,196 — $172,746 USD

New York City Pay Range

$183,272 — $229,091 USD

Illinois Pay Range

$138,196 — $172,746 USD

Commitment to Equal Opportunity

At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.

Global Data Privacy Notice for Job Candidates and Applicants

Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.

• DevOps and Sysadmin

Source: We Work Remotely