Senior Security Engineer, Detection & Response

Senior detection and response engineer in Flexport's security team, based in the San Francisco office, where the team meets regularly to work through incidents and detection design. Engineers own detections end to end with no MSSP or tier-1 analysts in between, sharing a follow-the-sun pager.

The work covers detections-as-code across endpoint, identity, SaaS and cloud, tracking coverage against MITRE ATT&CK along with precision and detection speed, leading incidents from triage to a retrospective that produces systemic fixes, building automation, setting logging requirements for new systems and hunting across the estate. Flexport looks for roughly five to eight years of hands-on detection, response or hunting work, production SIEM or detection pipeline experience, Python or Go, and real incident leadership; fraud detection and Kubernetes telemetry experience help.