The opportunity
At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it.
What you'll do
Build and tune detections across endpoint, identity, SaaS, and cloud ,: treating them as software: version-controlled, peer-reviewed, and shipped through the same CI/CD practices the rest of engineering uses.
Track detection quality as measured quantities: coverage against MITRE ATT&CK, precision, time-to-detect. We don’t build-and-forget here.
Own incident response: triage, contain, remediate, and write the retrospective that turns the incident into a systemic fix.
Build automation that removes toil from investigations, and partner closely: with the US-based team so context carries across time zones instead of getting lost at handoff.
Define telemetry requirements for new systems before they ship , working with: infrastructure and product teams to close visibility gaps rather than discovering them during an incident.
Threat hunt proactively across the estate , converting hypotheses into either: new detections or documented coverage.
