Senior Security Engineer, Detection & Response at Flexport
Netherlands
Posted
on-site · full-time · Visa sponsorship
Apply for this role at Flexport
Responsibilities:
- Own detection engineering end-to-end: design, implement, test, and maintain detections and rules as version-controlled code.
- Track detection quality with measurable metrics (MITRE coverage, precision, time-to-detect) and iterate on tuning.
- Lead EMEA-hours incident response: triage, contain, remediate, and produce retrospectives that drive systemic fixes.
- Build automation to remove manual toil in investigations and ensure handoffs across time zones carry context.
- Define telemetry requirements for new systems, partner with product and infra teams to close visibility gaps.
- Perform proactive threat hunting and convert findings into detections or documented coverage.
Requirements:
- Typically 5–8 years in detection engineering, incident response, or threat hunting with hands-on experience writing/tuning detections.
- Proficiency in at least one programming language (Python, Go, or similar) and comfort producing production-grade detection/automation code.
- Experience with modern SIEM/detection pipelines (Panther, Elastic, Splunk, or equivalents) and shipping detection logic to production.
- Practical incident response experience leading triage and remediation of real security incidents.
- Familiarity with MITRE ATT&CK, telemetry design, cloud and endpoint security concepts; automation and observability experience preferred.