{"id":2194779,"url":"https://alion.io/job/flexport-senior-security-engineer-detection-response-3","title":"Senior Security Engineer, Detection & Response","company":{"id":58573,"name":"Flexport","domain":"flexport.com","url":"https://alion.io/company/flexport","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":81,"open_postings":46,"ghost_share":0,"stale_share":0.543,"repost_share":0.022,"time_to_fill_p50_days":62,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Amsterdam, Netherlands"],"countries":["NL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":116000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":16},"experience_years_min":5,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Agile","optional":true},{"name":"GDPR","optional":true},{"name":"LLM","optional":true}],"status":"live","first_seen_at":"2026-10-09T17:15:01Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-13T06:43:12Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"About Flexport: \nAt Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes-from emerging brands to Fortune 500s-use Flexport technology to move more than $19B of merchandise across 112 countries a year. \nThe recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.\nThere is no MSSP and no tier-1 queue here. Detection & Response engineers own their detections end to end: you write them, you tune them, and your team is paged when they fire. The security team is spread across the globe with a follow-the-sun pager rotation so nobody is paged at 3am local.\nThe adversaries are real. The business is growing fast and the threat surface is growing with it. Defining the necessary telemetry is part of the job.\nWhat You'll Do\nDetection engineering\nBuild and tune detections across endpoint, identity, SaaS, and cloud, treating them as software: version-controlled, peer-reviewed, and shipped through the same CI/CD practices the rest of engineering uses.\nTrack detection quality as measured quantities: coverage against MITRE ATT&CK, precision, time-to-detect. We don’t build-and-forget here.\nResponse & automation\nOwn EMEA-hours incident response: triage, contain, remediate, and write the retrospective that turns the incident into a systemic fix.\nBuild automation that removes toil from investigations, and partner closely with the US-based team so context carries across time zones instead of getting lost at handoff.\nTelemetry & partnership\nDefine telemetry requirements for new systems before they ship, working with infrastructure and product teams to close visibility gaps rather than discovering them during an incident.\nThreat hunt proactively across the estate, converting hypotheses into either new detections or documented coverage.\nYou Should Have\nTypically5-8 years of experience in detection engineering, incident response, or threat hunting, with real hands-on time writing and tuning detections. We care more about what you've built than the exact number.\nProficiency in at least one programming language (Python, Go, or similar) and comfort writing production-grade detection and automation code.\n Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar). What matters is that you've shipped and tuned detection logic in production.\n Practical incident response experience: you've led or played a major role in triaging and closing out real security incidents.\nNice to Have\nExperience treating detections as code with CI/CD, peer review, and staged rollout.\nExperience defining telemetry contracts for systems before they ship.\nA track record of critically evaluating and verifying AI-assisted work - testing, source-checking, validation - rather than trusting agent output by default. If you haven’t already spotted the em dashes in this job description and already thought about where the hiring manager (hi!) has put hands on keyboard and compared that to where they let the LLM watermarks through, you might not be the right person for the job.\nFamiliarity with EU data-residency and cross-border data-handling considerations.\nExperience with fraud or financial-crime detection patterns.\nHow We Work\nIn Amsterdam we come to the office 3 times a week to hang out, whiteboard, and ship together.\nWe stay closely aligned with our coworkers on other continents.\nWe have the latest hardware and software, including frontier AI models on day one.\nWe're agile, but not dogmatic. Teams decide how they work best.\nWhy This Role Is Special\nYou own your detections end to end. No MSSP, no tier-1 queue, and real authority over incident response rather than a night-shift triage seat.\nThe consequences here are physical, not abstract: a containment decision can stop a customs filing or freight actually moving.\nYou'll inherit a real, established estate with legacy telemetry gaps to close - genuinely underexplored surface area, not a well-mined problem.\nWe sponsor visas for the right candidate.\nWhat's in it for you\nAn opportunity to contribute to one of the fastest-growing companies, where you'll have the chance to create a global impact while being part of a thriving multinational environment\nDaily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on a daily basis\nCommute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam\n25 working days as vacation days based on full-time employment\nHealth insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport.\nA defined pension contribution scheme\nEquity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success.\nEmployee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members\nParental leave benefit: Flexport is here to support you and your family during one of the most important times in life - the birth of a child. Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child.\nCommitment to Equal Opportunity\nAt Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.\nGlobal Data Privacy Notice for Job Candidates and Applicants\nDepending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.","description_format":"text","description_chars":6820,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Health insurance","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Freight Forwarding","Customs Brokerage","Supply Chain","Supply Chain & Logistics Software"],"lifecycle":[{"event":"open","at":"2026-10-09T18:59:56Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":3,"expected_fill_days":62,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/flexport-senior-security-engineer-detection-response-3","json_url":"https://alion.io/job/flexport-senior-security-engineer-detection-response-3.json","meta":{"generated_at":"2026-10-13T07:02:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10304,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58573},"rest":"https://alion.io/mcp/rest/get_company?id=58573"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fflexport-senior-security-engineer-detection-response-3"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fflexport-senior-security-engineer-detection-response-3"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fflexport-senior-security-engineer-detection-response-3"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/flexport-senior-security-engineer-detection-response-3\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fflexport-senior-security-engineer-detection-response-3"}]}