The opportunity
At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it.
What you'll do
Own and mature our endpoint security stack (EDR) across macOS and Windows: fleets , writing device policy as code — configuration profiles, remediation scripts, and enforcement rules — with staged rollout and rollback built in.
Own security configuration and monitoring for Flexport's critical SaaS: applications (Google Workspace, Slack, and similar) through SSPM tooling, catching risky OAuth grants and configuration drift before they become incidents.
Drive Flexport's identity posture: SSO coverage, phishing-resistant MFA and passkey rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
Lead Flexport's zero-trust journey: making sure the right people have the right access, with the right controls, verified continuously.
Build and tune detection rules in our SIEM , turning signal into actionable alerts, not noise.
Lead incident response for security events: triage, contain, remediate, and write the retrospective.
What they're looking for
- Run regular assessments of corporate endpoints and prioritize findings by real business risk.
- Manage vendor and third-party security reviews , working with procurement and: legal to evaluate risk before it lands in our environment.
- Partner with IT, Engineering, and People teams to embed security into the way: we work without creating friction that drives people to workarounds.
- Develop and maintain runbooks, playbooks, and internal documentation that: make the whole team more capable, and mentor engineers earlier in their career.
