Security Engineer, Corporate Security

Security engineer on Flexport's Corporate Security team, part of the Platform, Security & Infrastructure group, protecting the laptops, identity provider, SaaS applications and browsers every employee uses. This is an engineering role built around code and automation rather than IT tickets, based in the San Francisco office.

The engineer extends SSO and phishing-resistant MFA, automates SCIM lifecycle and least privilege, builds detections for account takeover and token theft, ships macOS and Windows device policy as code, improves EDR coverage, reduces SaaS risk with SSPM and OAuth grant monitoring, and automates access reviews and vendor questionnaires. Flexport wants roughly two to five years in corporate or enterprise security engineering, hands-on endpoint management and EDR, working knowledge of SAML, OIDC, SCIM and a major IdP, and Python or Go scripting.