Security Engineer, Corporate Security

📋 Description

• Advance our identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle
• Build the detections and guardrails that catch account takeover, MFA fatigue attacks, and session
• Write and ship device policy as code — configuration profiles, remediation scripts, and enforcement
• Maintain and improve our EDR stack's detection and response coverage across the fleet.
• Reduce SaaS risk at scale through SSPM tooling and automation, including detection of risky OAuth
• Own security configuration for the SaaS tools hundreds of Flexporters use daily (Google Workspace

🎯 Requirements

• Typically 2–5 years of experience in corporate, enterprise, or IT security engineering — we care
• Hands-on experience with modern endpoint management and EDR tooling (Jamf, Kandji, Intune
• Working knowledge of identity protocols (SAML, OIDC, SCIM) and a major identity provider (Okta
• Comfort writing real code or scripts (Python, Go, or similar) to replace manual, ticket-driven work
• Clear, practical communicator who can explain a control tradeoff to an engineer, a salesperson, and

🎁 Benefits

• We're in the San Francisco office regularly to work through incidents and detection design in
• We stay closely aligned with teammates on other continents via Slack, video, and async docs.
• We have the latest hardware and software, including frontier AI models on day one.
• We're agile, but not dogmatic. Teams decide how they work best.
• Broad, real ownership: at this level elsewhere you might own a slice of a control; here you'll own
• Every device policy or identity control you ship protects every Flexporter, immediately — no