{"id":4052890,"url":"https://alion.io/job/flexport-security-engineer-product-security-2","title":"Security Engineer, Product Security","company":{"id":58573,"name":"Flexport","domain":"flexport.com","url":"https://alion.io/company/flexport","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":78,"open_postings":43,"ghost_share":0,"stale_share":0.674,"repost_share":0,"time_to_fill_p50_days":62,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":130950,"max":202125,"currency":"USD","period":"year","gross":null,"usd_annual":202125},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"GCP","optional":false},{"name":"JavaScript","optional":false},{"name":"Kotlin","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"GDPR","optional":true},{"name":"Semgrep","optional":true},{"name":"Slack","optional":true},{"name":"Snyk","optional":true}],"status":"live","first_seen_at":"2026-11-11T00:06:55Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T02:49:48Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Flexport: \nAt Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes-from emerging brands to Fortune 500s-use Flexport technology to move more than $19B of merchandise across 112 countries a year. \nThe recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.\nWhat You'll Do\nArchitecture & strategyDefine security architecture for Flexport's products and services, and set the patterns and reference implementations that make secure-by-default the path of least resistance.\nLead security engineering reviews for the highest-risk product features, and set the bar for what \"good\" looks like in reviews you don't personally run.\nBuild and scale the security champions program and product security training that extend your judgment into teams where you can't be in every review.\n\nDesign-time & reviewLead domain-specific threat modeling and attack surface analysis across Flexport's product surface, not just individual features.\nPartner with engineering leadership to resolve the design tradeoffs that a senior engineer would escalate.\n\nVulnerability managementSet the bar for how the team triages, reproduces, and prioritizes bug bounty submissions and internal security reports, and step in on the hardest or highest-severity cases.\nDrive remediation of systemic classes of vulnerability, not just individual findings.\n\nDeveloper enablement & leadershipOwn the security services and tooling consumed by product teams across our global infrastructure.\nMentor other engineers on the team, and act as the authoritative technical voice on product security across engineering leadership.\n\nYou Should Have\nTypically 2-5 years of experience in product/application security or software development with a security focus - we care more about what you've built than the exact number. If you meet most of this, apply; we'd rather see your work than filter you out on a résumé line.\n Strong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10)\nProficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools\n Working knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python) and at least one major cloud provider (AWS, GCP, Azure)\n Comfortable with security on-call rotation and picking up work across security disciplines when needed\nNice to Have\nHands-on experience with bug bounty platforms\nHands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar)\nExperience with cloud infrastructure security and container technologies\nParticipation in CTF events or open-source security projects\nFamiliarity with threat modeling frameworks and secure SDLC best practices\nInterest in contributing to internal developer security training programs\nHow We Work\nWe stay closely aligned with teammates on other continents via Slack, video, and async docs\nWe have the latest hardware and software, including frontier AI models on day one\nWe're agile, but not dogmatic - the team decides how it works best\nWhy This Role Is Special\nMassive leverage: the conventions and champions program you build are multiplied across hundreds of engineers who never talk to you directly.\nBroad authority: you set the architecture other reviews are measured against, rather than being the one measured.\nYou're part of PSI: the platform, security, and infrastructure teams work hand in hand, and security is treated as infrastructure with real engineering quality bars, not a policy function.\nThe range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Our salary ranges are determined by role, level, and location. Within the range displayed, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and / or training. Base salary is just one part of our total rewards package at Flexport, which also includes bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off. \nCalifornia Pay Range\n$130,950—$202,125 USD\nWashington Pay Range\n$147,000—$183,750 USD\nColorado Pay Range\n$148,210—$163,688 USD\nNew York City Pay Range\n$147,000—$183,750 USD\nIllinois Pay Range\n$148,210—$163,688 USD\nCommitment to Equal Opportunity\nAt Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.\nGlobal Data Privacy Notice for Job Candidates and Applicants\nDepending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.","description_format":"text","description_chars":5795,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible time off"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Freight Forwarding","Customs Brokerage","Supply Chain","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-11-11T02:49:48Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 32 · green card filings: 4","filings_12m":32,"filings_prev_12m":44,"green_card_filings_12m":4,"median_offered_wage_usd":165278,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":1}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":62,"reasons":["conf:2","win:early","comp:junior,brand"],"computed_at":"2026-11-11T04:50:01Z"},"pay":{"stated_usd_annual":202125,"is_top_pay":true},"html_url":"https://alion.io/job/flexport-security-engineer-product-security-2","json_url":"https://alion.io/job/flexport-security-engineer-product-security-2.json","meta":{"generated_at":"2026-11-11T04:50:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5746,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58573},"rest":"https://alion.io/mcp/rest/get_company?id=58573"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fflexport-security-engineer-product-security-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fflexport-security-engineer-product-security-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fflexport-security-engineer-product-security-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/flexport-security-engineer-product-security-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fflexport-security-engineer-product-security-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4052890}},{"tool":"search_jobs","arguments":{"company":"flexport.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4052890},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}