Is the Security Engineer, Product Security position at Flexport fully remote?

Yes, this Security Engineer, Product Security position at Flexport is a remote position. The role is available for candidates in United States.

Is this a full-time or part-time Security Engineer, Product Security role?

This is a full-time Security Engineer, Product Security position at Flexport.

What benefits does Flexport offer for this position?

Flexport offers the following benefits: Dental Insurance, Performance Bonus, Equity.

What is the salary range for the Security Engineer, Product Security position?

The salary range for this Security Engineer, Product Security role is $130.95k - $202.125k.

How do I apply for the Security Engineer, Product Security position at Flexport?

You can apply for this Security Engineer, Product Security position by clicking the "Apply Now" button on this page, which will take you to Flexport's application portal.

Security Engineer, Product Security at Flexport

United States

$130.95k - $202.125k

<div class="content-intro"><h2><strong>About Flexport: </strong></h2> <p>At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. </p> <p>The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.</p></div><h2>What You'll Do</h2> <ul> <li>Architecture & strategy <ul> <li><strong>Define security architecture for Flexport's products and services</strong>, and set the patterns and reference implementations that make secure-by-default the path of least resistance.</li> <li><strong>Lead security engineering reviews for the highest-risk product features</strong>, and set the bar for what "good" looks like in reviews you don't personally run.</li> <li><strong>Build and scale the security champions program and product security training</strong> that extend your judgment into teams where you can't be in every review.</li> </ul> </li> <li>Design-time & review <ul> <li><strong>Lead domain-specific threat modeling and attack surface analysis</strong> across Flexport's product surface, not just individual features.</li> <li><strong>Partner with engineering leadership to resolve the design tradeoffs</strong> that a senior engineer would escalate.</li> </ul> </li> <li>Vulnerability management <ul> <li><strong>Set the bar for how the team triages, reproduces, and prioritizes bug bounty submissions</strong> and internal security reports, and step in on the hardest or highest-severity cases.</li> <li><strong>Drive remediation of systemic classes of vulnerability</strong>, not just individual findings.</li> </ul> </li> <li>Developer enablement & leadership <ul> <li><strong>Own the security services and tooling consumed by product teams</strong> across our global infrastructure.</li> <li><strong>Mentor other engineers on the team, and act as the authoritative technical voice on product security</strong> across engineering leadership.</li> </ul> </li> </ul> <h2>You Should Have</h2> <ul> <li>Typically <strong>2–5 years of experience</strong> in product/application security or software development with a security focus — we care more about what you've built than the exact number. If you meet most of this, apply; we'd rather see your work than filter you out on a résumé line.</li> <li><strong>Strong grasp of web application security principles</strong> and common attack vectors (e.g., OWASP Top 10)</li> <li><strong>Proficiency with application testing tools</strong> such as Burp Suite, OWASP ZAP, or browser developer tools</li> <li><strong>Working knowledge of at least one modern programming language</strong> (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python) and at least one major cloud provider (AWS, GCP, Azure)</li> <li><strong>Comfortable with security on-call rotation</strong> and picking up work across security disciplines when needed</li> </ul> <h2>Nice to Have</h2> <ul> <li>Hands-on experience with bug bounty platforms</li> <li>Hands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar)</li> <li>Experience with cloud infrastructure security and container technologies</li> <li>Participation in CTF events or open-source security projects</li> <li>Familiarity with threat modeling frameworks and secure SDLC best practices</li> <li>Interest in contributing to internal developer security training programs</li> </ul> <h2>How We Work</h2> <ul> <li>We stay closely aligned with teammates on other continents via Slack, video, and async docs</li> <li>We have the latest hardware and software, including frontier AI models on day one</li> <li>We're agile, but not dogmatic — the team decides how it works best</li> </ul> <h2>Why This Role Is Special</h2> <ul> <li>Massive leverage: the conventions and champions program you build are multiplied across hundreds of engineers who never talk to you directly.</li> <li>Broad authority: you set the architecture other reviews are measured against, rather than being the one measured.</li> <li>You're part of PSI: the platform, security, and infrastructure teams work hand in hand, and security is treated as infrastructure with real engineering quality bars, not a policy function.</li> </ul> <p><span data-sheets-root="1">#LI-VA1</span></p><div class="content-pay-transparency"><div class="pay-input"><div class="description"><div class="c-message_kit__gutter"> <div class="c-message_kit__gutter__right" data-qa="message_content"> <div class="c-message_kit__blocks c-message_kit__blocks--rich_text"> <div class="c-message__message_blocks c-message__message_blocks--rich_text" data-qa="message-text"> <div class="p-block_kit_renderer" data-qa="block-kit-renderer"> <div class="p-block_kit_renderer__block_wrapper p-block_kit_renderer__block_wrapper--first"> <div class="p-rich_text_block"> <div class="p-rich_text_section"> <div><span style="font-family: arial, sans-serif;"><em>The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Our salary ranges are determined by role, level, and location. Within the range displayed, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and / or training. Base salary is just one part of our total rewards package at Flexport, which also includes bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off. </em></span></div> </div> </div> </div> </div> </div> </div> </div> </div></div><div class="title">California Pay Range</div><div class="pay-range"><span>$130,950</span><span class="divider">—</span><span>$202,125 USD</span></div></div><div class="pay-input"><div class="title">Washington Pay Range</div><div class="pay-range"><span>$147,000</span><span class="divider">—</span><span>$183,750 USD</span></div></div><div class="pay-input"><div class="title">Colorado Pay Range</div><div class="pay-range"><span>$148,210</span><span class="divider">—</span><span>$163,688 USD</span></div></div><div class="pay-input"><div class="title">New York City Pay Range</div><div class="pay-range"><span>$147,000</span><span class="divider">—</span><span>$183,750 USD</span></div></div><div class="pay-input"><div class="title">Illinois Pay Range</div><div class="pay-range"><span>$148,210</span><span class="divider">—</span><span>$163,688 USD</span></div></div></div><div class="content-conclusion"><div id="1704749847.557549" class="c-virtual_list__item" data-qa="virtual-list-item" data-item-key="1704749847.557549"> <div class="c-message_kit__background p-message_pane_message__message c-message_kit__message" data-qa="message_container" data-qa-unprocessed="false" data-qa-placeholder="false"> <div class="c-message_kit__hover" data-qa-hover="true"> <div class="c-message_kit__actions c-message_kit__actions--default"> <div class="c-message_kit__gutter"> <div class="c-message_kit__gutter__right" data-qa="message_content"> <div class="c-message_kit__blocks c-message_kit__blocks--rich_text"> <div class="c-message__message_blocks c-message__message_blocks--rich_text" data-qa="message-text"> <div class="p-block_kit_renderer" data-qa="block-kit-renderer"> <div class="p-block_kit_renderer__block_wrapper p-block_kit_renderer__block_wrapper--first"> <div class="p-rich_text_block"> <h4>Commitment to Equal Opportunity</h4> <p>At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.</p> <h4>Global Data Privacy Notice for Job Candidates and Applicants</h4> <p>Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at <a href="http://www.flexport.com/privacy" target="_blank" data-saferedirecturl="https://www.google.com/url?q=http://www.flexport.com/privacy&source=gmail&ust=1613840050053000&usg=AFQjCNHD63svlkD-hWHlGuGOM_bSYVrnpw">www.flexport.com/privacy</a> for additional information.</p> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div></div>

Apply Now

Remote Opportunity

Security Engineer, Product Security

Join Flexport as a mid professional working remotely from United States. Explore the role, benefits, and apply in one place.

Security Engineer, Product Security

Flexport

Full Time

$130.95k - $202.125k

3 hours ago

About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people.

United States

Engineering

Mid

Product Security

Application Security

Web Application Security

+5 more

Job Description

About Flexport:

At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year.

The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.

What You'll Do

Architecture & strategy
- Define security architecture for Flexport's products and services, and set the patterns and reference implementations that make secure-by-default the path of least resistance.
- Lead security engineering reviews for the highest-risk product features, and set the bar for what "good" looks like in reviews you don't personally run.
- Build and scale the security champions program and product security training that extend your judgment into teams where you can't be in every review.
Design-time & review
- Lead domain-specific threat modeling and attack surface analysis across Flexport's product surface, not just individual features.
- Partner with engineering leadership to resolve the design tradeoffs that a senior engineer would escalate.
Vulnerability management
- Set the bar for how the team triages, reproduces, and prioritizes bug bounty submissions and internal security reports, and step in on the hardest or highest-severity cases.
- Drive remediation of systemic classes of vulnerability, not just individual findings.
Developer enablement & leadership
- Own the security services and tooling consumed by product teams across our global infrastructure.
- Mentor other engineers on the team, and act as the authoritative technical voice on product security across engineering leadership.

You Should Have

Typically 2–5 years of experience in product/application security or software development with a security focus — we care more about what you've built than the exact number. If you meet most of this, apply; we'd rather see your work than filter you out on a résumé line.
Strong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10)
Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools
Working knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python) and at least one major cloud provider (AWS, GCP, Azure)
Comfortable with security on-call rotation and picking up work across security disciplines when needed

Nice to Have

Hands-on experience with bug bounty platforms
Hands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar)
Experience with cloud infrastructure security and container technologies
Participation in CTF events or open-source security projects
Familiarity with threat modeling frameworks and secure SDLC best practices
Interest in contributing to internal developer security training programs

How We Work

We stay closely aligned with teammates on other continents via Slack, video, and async docs
We have the latest hardware and software, including frontier AI models on day one
We're agile, but not dogmatic — the team decides how it works best

Why This Role Is Special

Massive leverage: the conventions and champions program you build are multiplied across hundreds of engineers who never talk to you directly.
Broad authority: you set the architecture other reviews are measured against, rather than being the one measured.
You're part of PSI: the platform, security, and infrastructure teams work hand in hand, and security is treated as infrastructure with real engineering quality bars, not a policy function.

#LI-VA1

The range displayed on each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations. Our salary ranges are determined by role, level, and location. Within the range displayed, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and / or training. Base salary is just one part of our total rewards package at Flexport, which also includes bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off.

California Pay Range

$130,950—$202,125 USD

Washington Pay Range

$147,000—$183,750 USD

Colorado Pay Range

$148,210—$163,688 USD

New York City Pay Range

$147,000—$183,750 USD

Illinois Pay Range

$148,210—$163,688 USD

Commitment to Equal Opportunity

At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.

Global Data Privacy Notice for Job Candidates and Applicants

Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.

Benefits

Dental Insurance
Performance Bonus
Equity

Skills

Product Security

Application Security

Web Application Security

Threat Modeling

Vulnerability Management

Burp Suite

Ruby

OWASP ZAP

Ready to Apply?

Join Flexport today

Salary Range

$130.95k - $202.125k

Posted 3 hours ago

More Engineering roles you might like

Discover similar opportunities from companies that are also hiring remotely.

Senior Software Engineer, Elixir

PDQ

Full Time

2 hours ago

Location • Remote, US - This position is open to candidates residing in any of PDQ’s open states: AR, AZ, CO, CT, FL, GA, ID, IL, IN, KY, MD, MI, MN, MO, NC, NH, OK, OR, TN, TX, UT, VA, WA, WI.

United States

Engineering

Backend Engineering

Senior

Elixir

Erlang

React

+5 more

REMOTE REO Asset Manager, Vylla

Vylla Home

Full Time

$60k - $75k

2 hours ago

Come join our amazing team and work remote from home! The REO Asset Manager will be responsible for the oversight and management of a portfolio of real estate owned (REO) properties, analyzing broker price opinions, appraisals, market data, agent feedback, and related real estate information to…

United States

Engineering

Backend Engineering

Mid

Asset Management

Negotiation

Critical Thinking

+5 more

Senior Manager, Financial Reporting and Advisory - Technology

Treewalk Consulting Inc.

Full Time

3 hours ago

The Role At Treewalk, you’ll own the entire public-company reporting cycle: fast closes, MD&A storytelling, IFRS/US GAAP judgment calls, and scalable system design.

Canada

Engineering

Backend Engineering

Senior

Financial reporting

IFRS

US GAAP

+5 more

Explore more remote openings

Browse fresh listings from our global community of remote-friendly teams.

Sales Patient Access Coordinator

Carrum Health

Full Time

2 hours ago

At Carrum Health, we have built a unique marketplace for specialty care with unparalleled patient experience Since 2014, we have been rewiring a fundamentally broken healthcare system.

United States

Sales

Account Executive

Mid

Sales Development

Lead Generation

Customer Service

+5 more

AI Application Engineer, EMEA

Seeq

Full Time

3 hours ago

The AI Applications Engineer designs, builds, and delivers production-grade agentic AI solutions on the Seeq platform to accelerate time-to-value for process manufacturers (O&G, Chemicals, Pharma, Power, Pulp & Paper, Food & Beverage, Semiconductor, and related industries).

United Kingdom

Machine Learning

Senior

Python

Agentic AI

LLM

+5 more

Senior Sales Training and Enablement Manager

Tebra

Full Time

$107.5k - $129.5k

3 hours ago

Tebra only initiates contact with candidates via email from an official Tebra email address (@ tebra.com , @ patientpop.com , or @ kareo.com ) or through our applicant tracking system, Greenhouse.

United States

Sales

Account Executive

Senior

Sales Training

Sales Enablement

SaaS sales

+5 more

Employee Benefits Account Manager (Growth & Gaps Team)

Higginbotham

Full Time

3 hours ago

Position Summary: The Account Manager position maintains a professional relationship with our clients through exceptional customer service. Account Managers are assigned a book of business comprised of fully insured and level funded clients.

United States

Marketing

Growth Marketing

Senior

Account Management

Customer Service

Employee Benefits

+5 more

Senior Manager, Financial Reporting and Advisory - Life Sciences

Treewalk Consulting Inc.

Full Time

3 hours ago

The Role At Treewalk, you’ll own the entire public-company reporting cycle: fast closes, MD&A storytelling, IFRS/US GAAP judgment calls, and scalable system design.

Canada

Engineering

Backend Engineering

Senior

Financial reporting

IFRS

US GAAP

+5 more

Manager, Financial Reporting and Advisory Services - US GAAP

Treewalk Consulting Inc.

Full Time

3 hours ago

The Role At Treewalk, you’ll own the entire public-company reporting cycle: fast closes, 10-K, 10-Q, and 20-F building, US GAAP judgment calls, and scalable system design. You’ll own end-to-end financial disclosure for a portfolio of high growth clients from a broad range of industries.

Canada

Engineering

Backend Engineering

Senior

US GAAP

Financial reporting

SEC filings

+5 more

Software Engineer

Push Operations

Full Time

CAD 90k - CAD 130k

3 hours ago

The Company: Push is an all-in-one platform that helps businesses grow and scale their companies by simplifying HR, payroll, time tracking, and scheduling. Our purpose is to help our customers free up their time by making people management ridiculously easy, so they can focus on their passion.

Canada

Engineering

Backend Engineering

Mid

Full Stack Development

React

React Native

+5 more

Tax Operations Specialist

DoorDash Mexico

Full Time

3 hours ago

About the Team Indirect Tax Compliance owns DoorDash's state and local non-income tax obligations, including registrations, business tax filings, exemption certificate management, and use-tax self-assessment and payment, in every market where DoorDash operates.

Mexico

Operations

Mid

Tax Compliance

Accounts Payable

Invoicing

+5 more