Hundreds of engineers and thousands of freight operators around the world rely on Flexport's internal systems every single day to keep billions of dollars of freight moving. Keeping those systems — and the people who use them — secure is not a compliance checkbox. It's the core infrastructure for a company operating across 112 countries.

The PSI (Platform, Security & Infrastructure) team is looking for a Senior Security Engineer to own the security of Flexport's corporate environment: endpoints, identity systems, internal networks, and the SaaS estate. This is a security engineering role, not an IT support role, and not a role where you write policies and hope for the best. You'll build, automate, and be on the ground when things get real.

What You'll Do

Endpoint & SaaS security

• Own and mature our endpoint security stack (EDR) across macOS and Windows fleets, writing device policy as code — configuration profiles, remediation scripts, and enforcement rules — with staged rollout and rollback built in.
• Own security configuration and monitoring for Flexport's critical SaaS applications (Google Workspace, Slack, and similar) through SSPM tooling, catching risky OAuth grants and configuration drift before they become incidents.

Access management

• Drive Flexport's identity posture: SSO coverage, phishing-resistant MFA and passkey rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
• Lead Flexport's zero-trust journey — making sure the right people have the right access, with the right controls, verified continuously.

Detection & response

• Build and tune detection rules in our SIEM, turning signal into actionable alerts, not noise.
• Lead incident response for security events: triage, contain, remediate, and write the retrospective.

Vulnerability & risk management

• Run regular assessments of corporate endpoints and prioritize findings by real business risk.
• Manage vendor and third-party security reviews, working with procurement and legal to evaluate risk before it lands in our environment.

Security enablement & leadership

• Partner with IT, Engineering, and People teams to embed security into the way we work without creating friction that drives people to workarounds.
• Develop and maintain runbooks, playbooks, and internal documentation that make the whole team more capable, and mentor engineers earlier in their career.
• Bring a point of view on how agentic AI tools and browser-based AI assistants change what corporate security needs to watch for.

You Should Have

• Typically 5–8 years of experience in enterprise security, corporate IT security, or information security engineering — we care more about what you've built than the exact number. If you meet most of this, apply.
• Strong working knowledge of endpoint security tooling: DLP (Cyberhaven, Purview, Varonis, or similar) and EDR (CrowdStrike, SentinelOne, or similar).
• Practical SIEM experience, writing detection logic, triaging alerts, and reducing false positive noise.
• Experience leading or playing a significant role in security incident response.
• Working knowledge of cloud environments (AWS, GCP, or Azure).

Nice to Have

• Experience with network security in a cloud-first environment (ZTNA, SASE, DNS filtering).
• Hands-on experience with infrastructure-as-code tools (Terraform) for security configuration management.
• Familiarity with SCIM, OIDC, and fine-grained authorization at scale.
• Experience working in a high-growth, global technology company.
• Scripting skills in Python, Bash, or similar, for automating detection, response, and operational tasks.
• Exposure to privacy regulations relevant to a European and global context (GDPR, etc.).

How We Work

• We come to the office 3 times a week to hang out, whiteboard, and ship together.
• We have the latest hardware and software, including frontier AI models on day one.
• We're agile, but not dogmatic. Teams decide how they work best.

Why This Role Is Special

• Broad ownership: you're not a cog in a large security org — you own the corporate security posture end to end, from endpoints to observability to incident response.
• Real stakes: Flexport operates in 112 countries with a global workforce. Security here matters at a genuine scale.
• Build, don't just operate: we want to automate and engineer our way to a stronger posture, not just run playbooks.
• You're part of PSI: the platform, security, and infrastructure teams work hand in hand at Flexport. We value engineering quality and treat security as infrastructure, not just policy.
• We sponsor visas for the right candidate.

What's in it for you

• An opportunity to contribute to one of the fastest-growing companies, where you'll have the chance to create a global impact while being part of a thriving multinational environment.
• Daily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on a daily basis.
• Commute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam.
• 25 working days as vacation days based on full-time employment.
• Health insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport.
• A defined pension contribution scheme.
• Equity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success.
• Employee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members.
• Parental leave benefit: Flexport is here to support you and your family during one of the most important times in life — the birth of a child. Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child.