Security Engineer, Product Security

📋 Description

• Define security architecture for Flexport's products and services, and set the patterns and
• Lead security engineering reviews for the highest-risk product features, and set the bar for what
• Build and scale the security champions program and product security training that extend your
• Lead domain-specific threat modeling and attack surface analysis across Flexport's product surface
• Partner with engineering leadership to resolve the design tradeoffs that a senior engineer would
• Set the bar for how the team triages, reproduces, and prioritizes bug bounty submissions and

🎯 Requirements

• Typically 2–5 years of experience in product/application security or software development with a
• Strong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10)
• Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools
• Working knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin
• Comfortable with security on-call rotation and picking up work across security disciplines when
• Hands-on experience with bug bounty platforms

🎁 Benefits

• Bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off
• Latest hardware and software, including frontier AI models on day one
• Agile team environment (not dogmatic)
• Massive leverage: the conventions and champions program you build are multiplied across hundreds of
• Broad authority: you set the architecture other reviews are measured against
• Part of PSI (platform, security, and infrastructure) teams working hand in hand