Remote Staff Security Engineer, Product Security

Description:

• Define security architecture for Flexport's products and services, ensuring secure-by-default practices.
• Lead security engineering reviews for high-risk product features and establish standards for reviews.
• Build and scale the security champions program and product security training.
• Conduct domain-specific threat modeling and attack surface analysis.
• Manage vulnerability triage and remediation of systemic vulnerabilities.
• Own security services and tooling for product teams and mentor engineers.

Requirements:

• 8+ years of experience in product/application security with hands-on experience in building security tools.
• Proven track record of designing scalable security architecture across multiple teams and services.
• Strong understanding of web application security principles and experience with application testing tools.
• Software development experience in modern languages (Go, Python, Java/Kotlin, TypeScript, Ruby).
• Experience leading multi-team technical initiatives and mentoring engineers.

Benefits:

• Competitive salary range based on location and experience.
• Comprehensive benefits package including medical, dental, and flexible time off.
• Opportunity to influence security practices across hundreds of engineers.