Security Engineer, Corporate Security
Flexport, U.S. Remote +2
What you will do
- Identity & access
- Advance our identity posture: SSO coverage, phishing-resistant MFA rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
- Build the detections and guardrails that catch account takeover, MFA fatigue attacks, and session token theft before they turn into incidents.
- Endpoint & device lifecycle
- Write and ship device policy as code – configuration profiles, remediation scripts, and enforcement rules across macOS and Windows — with staged rollout and rollback built in from day one.
- Maintain and improve our EDR stack's detection and response coverage across the fleet.
- SaaS posture
- Reduce SaaS risk at scale through SSPM tooling and automation, including detection of risky OAuth grants, shadow IT, and configuration drift across our critical SaaS applications.
- Own security configuration for the SaaS tools hundreds of Flexporters use daily (Google Workspace, Slack, and similar), and keep pace as we add AI agents and MCP integrations to that surface.