Senior Security Engineer, Corporate Security at Flexport
Netherlands
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Flexport
Responsibilities:
- Own and mature endpoint security (EDR) for macOS and Windows: policy-as-code, configuration, remediation and staged rollouts.
- Manage security configuration and monitoring for critical SaaS apps using SSPM tooling to prevent risky OAuth grants and drift.
- Drive identity and access posture: SSO coverage, phishing-resistant MFA/passkeys, SCIM lifecycle automation and least-privilege access.
- Lead zero-trust initiatives and enforce continuous verification across cloud and SaaS estate.
- Build and tune detection rules in the SIEM; convert signals into actionable alerts and playbooks.
- Lead incident response: triage, contain, remediate, and document retrospectives and improvements.
- Run endpoint and SaaS vulnerability assessments; prioritize remediation by real business risk and manage vendor security reviews.
- Partner with IT, Engineering and People teams to embed security controls and enable secure workflows without blocking productivity.
Requirements:
- 5+ years of enterprise or security engineering experience with strong hands-on skills in endpoint security, SIEM and incident response.
- Experience managing EDR platforms across mixed fleets and writing automation (Python, Bash or similar) for enforcement and remediation.
- Strong understanding of identity systems, SSO, MFA, SCIM and least-privilege access models.
- Practical experience with cloud platforms (AWS, GCP, Azure) and SaaS security tooling.
- Proven ability to tune detections, run tabletop exercises and lead post-incident improvement work.
- Excellent communication skills to work cross-functionally and present risk-driven recommendations to stakeholders.