Senior Security Engineer

The opportunity: 

Flexport is looking for a Senior Security Engineer to help Flexport establish itself as the most trusted company in the global trade ecosystem.  As a Security Engineer, Enterprise Infrastructure, you will be responsible for enabling visibility across our enterprise, deploying and managing commercial security tools, building integrations, automation and custom tools to bridge gaps, as well as building security capabilities into our enterprise environment.

You will: 

• Partner with our IT and security teams to develop, deploy, and maintain secure enterprise architectures aligned to internal standards and current best practices. 
• Implement, tune, and administer endpoint security solutions that enable protection, detection, response and recovery capabilities (anti-malware, EDR, forensics, email and web security).
• Develop monitoring capabilities that enable continuous asset inventory and posture assessment across the enterprise to enhance our configuration and vulnerability management programs.
• Review, enhance, and maintain system hardening and secure configuration standards for server and client endpoints, including Linux, MacOS, and Windows.
• Design, deploy, and manage network security controls (firewall, VPN, 802.1x, proxies, wireless, zero trust) in partnership with IT that ensure secure and scalable global network architectures. 
• Maintain and enhance our current security tools spanning EDR/SIEM/VPN/DLP/CSPM.
• Build out security automation capabilities (e.g. SOAR) that enable the enrichment of security data feeds, auto-remediation of critical security events and other security playbooks.
• Enhance SIEM capabilities that consolidate visibility of all security technology outputs to enable continuous monitoring, incident detection, analysis, forensic artifact collection, containment, eradication, and recovery.
• Participate in security support escalations, security incident response, red team and penetration testing exercises, bug bounty response, and audit support.
• Prepare reports, presentations, and newsletter items for communicating with management and teams across the company.

• Create a culture of transparency, information sharing, and collaboration through the development of excellent documentation, mentoring of junior team members, and living Flexport’s values.

You should have:

• Strong interpersonal and communications skills
• Bachelor’s degree in Computer Science or a related field
• 6+ years of security experience in a fast-paced global environment.
• 3+ years of experience with SIEM and security orchestration technologies, including the automation of security tasks in languages such as Go, JavaScript, Python, and/or Ruby.
• 3+ years of experience with endpoint, web, and email protection technologies.
• Experience with Zero Trust Architectures, as well as traditional network perimeter controls, such as firewall and VPN.
• Experience working cross functionally to drive internal security projects and incident remediation.
• Excellence in problem-solving, strategic thinking, and collaboration with cross-functional teams.
• A "compliance first" attitude to keep our regulators happy and enthusiastic about Flexport since we operate in a heavily regulated industry.

#LI-Hybrid