Staff Security Engineer – Product Security

Job not on LinkedIn

🔥 1 minute ago

🏄 California, Colorado, +3 more states – Remote

🏄 California – Remote ⛰️ Colorado – Remote 🌽 Illinois – Remote 🗽 New York – Remote ☕ Washington – Remote

💵 $148.2k - $270.7k / year

⏰ Full Time

🔴 Lead

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.Why this score:

• Just posted.

Apply Now

Find Similar Remote Jobs

Flexport

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2013

📦 Logistics

🚗 Transport

☁️ SaaS

💰 $200M Debt Financing on 2022-10

Logistics • Transport • SaaS

Flexport is a global logistics platform that coordinates the movement of goods from the factory to the customer's door. The company offers comprehensive solutions for freight forwarding, including ocean, air, and trucking services, as well as customs brokerage and trade finance. Flexport's technology-driven platform provides real-time visibility and management of the supply chain, empowering businesses to optimize speed, cost, and reliability. The company also focuses on sustainable practices, such as reducing transportation emissions through the use of marine biofuel.

📋 Description

• Define security architecture for Flexport's products and services • Set secure-by-default patterns and reference implementations • Lead security engineering reviews for the highest-risk product features • Build and scale the security champions program and product security training • Lead domain-specific threat modeling and attack surface analysis across Flexport's product surface • Partner with engineering leadership to resolve senior-level design tradeoffs • Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports • Handle the hardest or highest-severity security cases • Drive remediation of systemic vulnerability classes • Own security services and tooling consumed by product teams across global infrastructure • Mentor engineers and serve as the authoritative technical voice on product security across engineering leadership

🎯 Requirements

• Typically 8+ years of experience in product/application security • Hands-on experience building security tools and services • Track record of designing security architecture that scales across many teams and services • Strong grasp of web application security principles • Hands-on experience with application testing tools such as Burp Suite, OWASP ZAP, or similar • Software development experience building security tools in at least one modern language: Go, Python, Java/Kotlin, TypeScript, Ruby, or similar • Track record of leading multi-team technical initiatives and mentoring engineers into senior roles • Experience running or scaling a security champions program • Identity management and identity federation experience with SAML, OAuth, or SCIM • Experience with IaaS cloud infrastructure, Kubernetes, containers, and service-oriented architectures • Hands-on experience with bug bounty platforms and SAST tools such as Cycode, Semgrep, Snyk, or similar • Experience performing code audits on internal or open-source libraries before production release

🏖️ Benefits

• Bonus • Equity • Comprehensive medical benefits • Dental benefits • Flexible time off • Latest hardware and software • Frontier AI models on day one

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume