Remote Security Engineer, Product Security

Description:

• Define security architecture for Flexport's products and services, ensuring secure-by-default practices.
• Lead security engineering reviews for high-risk product features and establish standards for reviews.
• Build and scale the security champions program and product security training.
• Conduct domain-specific threat modeling and attack surface analysis.
• Manage vulnerability triage and remediation of systemic vulnerabilities.
• Own security services and tooling for product teams and mentor engineers.

Requirements:

• 2–5 years of experience in product/application security or software development with a security focus.
• Strong understanding of web application security principles and common attack vectors (e.g., OWASP Top 10).
• Proficiency with application testing tools (e.g., Burp Suite, OWASP ZAP).
• Knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python) and a major cloud provider (AWS, GCP, Azure).
• Comfortable with security on-call rotation and cross-discipline work.

Benefits:

• Competitive salary range: $130,950 - $202,125 USD (varies by location).
• Comprehensive benefits package including medical, dental, and flexible time off.