Flexport

Flexport

Senior Security Engineer, Detection & Response

San Francisco, California, United States · Senior

Sponsorship not specified$206k-$252kDetected 3 days ago
PythonGoCode ReviewKubernetesCI/CDRESTLLMsCybersecuritySIEMDetection EngineeringIncident ResponseComplianceSupply Chain

Stay score

odds of building a lasting career here

59Sponsors, lottery-bound
Cap-exempt (no lottery)0
Sponsors this role80
Entry-level history0
PERM / green-card track0
Lottery odds (Level IV)94
Fits your clock70

Sponsors, but it's cap-subject — you still face the weighted lottery (~61% per draw at Level IV). Good if you win; have a cap-exempt backup on your list.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card filing pattern in this occupation

Context, not a finding about this posting: of this employer's 4 green-card filings in this occupation, 100% were for a worker who already held the job.

Files H-1B transfers

7 transfer filings in the last year, covering 7 workers. Median labor-condition decision: 8 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • Today, companies of all sizes-from emerging brands to Fortune 500s-use Flexport technology to move more than $19B of merchandise across 112 countries a year.
  • The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world.
  • Ready to tackle global challenges that impact business, society, and the environment?

Responsibilities

  • Detection & Response engineers own their detections end to end: you write them, you tune them, and your team is paged when they fire.
  • Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software: version-controlled, peer-reviewed, and shipped through the same CI/CD practices the rest of engineering uses.
  • Own incident response: triage, contain, remediate, and write the retrospective that turns the incident into a systemic fix.
  • Build automation that removes toil from investigations, and partner closely with the US-based team so context carries across time zones instead of getting lost at handoff.
  • We don't build-and-forget here.

Requirements

  • Typically 5-8 years of experience in detection engineering, incident response, or threat hunting, with real hands-on time writing and tuning detections.
  • Proficiency in at least one programming language (Python, Go, or similar) and comfort writing production-grade detection and automation code.
  • Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar).

Nice to have

  • Experience treating detections as code with CI/CD, peer review, and staged rollout.
  • Experience defining telemetry contracts for systems before they ship, rather than retrofitting logging after an incident.
  • A track record of critically evaluating and verifying AI-assisted work - testing, source-checking, validation - rather than trusting agent output by default.
  • Familiarity with cloud-native and Kubernetes telemetry.
  • Experience with fraud or financial-crime detection patterns.
  • We stay closely aligned with teammates on other continents via Slack, video, and async docs.
  • We have the latest hardware and software, including frontier AI models on day one.
  • We're agile, but not dogmatic.

Compensation

  • The range displayed on each job posting reflects the minimum and maximum target for new hire base salary for the position in the posting's respective region.

Benefits

  • Track detection quality as measured quantities: coverage against MITRE ATT&CK, precision, time-to-detect.
  • Threat hunt proactively across the estate, converting hypotheses into either new detections or documented coverage.

Company info

  • About Flexport: At Flexport, we believe global trade can move the human race forward.
  • That's why it's our mission to make global commerce so easy there will be more of it.
  • Defining the necessary telemetry is part of the job.
  • The adversaries are real. The business is growing fast and the threat surface is growing with it. Defining the necessary telemetry is part of the job.
  • At Flexport, we believe global trade can move the human race forward.
  • We're shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people.
  • We are proud to have the support of the best investors in the game who believe in our mission, solutions and people.
Apply directly at Flexport →Create a free account for alerts like thisView Flexport immigration profile

This listing is sourced directly from Flexport's careers page and normalized into a canonical job model.