> Markdown version of [/jobs/ext/3693206-security-engineer-corporate-security](https://www.wearedevelopers.com/jobs/ext/3693206-security-engineer-corporate-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer, Corporate Security

- **Company:** Flexport
- **Location:** Amsterdam, Netherlands (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Bash Shell, Software as a Service, Cyber Security, Domain Name System (DNS), Identity and Access Management, Python (Programming Language), Network Security, Machine Learning, OAuth, OpenID, Anti-Phishing, Zero Trust Network Access, Security Information and Event Management, Value Engineering, Scripting, Cloud Platform System, Infrastructure Automation Frameworks, Gsuite, Terraform, SentinelOne Expertise
- **Published:** October 12, 2026
- **Apply:** https://job-boards.greenhouse.io/flexport/jobs/8258535

## About the Role

* Typically 5-8 years of experience in enterprise security, corporate IT security, or information security engineering - we care more about what you've built than the exact number. If you meet most of this, apply.
 * Strong working knowledge of endpoint security tooling: DLP (Cyberhaven, Purview, Varonis, or similar) and EDR (CrowdStrike, SentinelOne, or similar).
 * Practical SIEM experience, writing detection logic, triaging alerts, and reducing false positive noise.
 * Experience leading or playing a significant role in security incident response.
 * Working knowledge of cloud environments (AWS, GCP, or Azure).

Nice to Have

 * Experience with network security in a cloud-first environment (ZTNA, SASE, DNS filtering).
 * Hands-on experience with infrastructure-as-code tools (Terraform) for security configuration management.
 * Familiarity with SCIM, OIDC, and fine-grained authorization at scale.
 * Experience working in a high-growth, global technology company.
 * Scripting skills in Python, Bash, or similar, for automating detection, response, and operational tasks.
 * Exposure to privacy regulations relevant to a European and global context (GDPR, etc.).

## Description

* Own and mature our endpoint security stack (EDR) across macOS and Windows fleets, writing device policy as code - configuration profiles, remediation scripts, and enforcement rules - with staged rollout and rollback built in.
 * Own security configuration and monitoring for Flexport's critical SaaS applications (Google Workspace, Slack, and similar) through SSPM tooling, catching risky OAuth grants and configuration drift before they become incidents.

Access management

 * Drive Flexport's identity posture: SSO coverage, phishing-resistant MFA and passkey rollout, SCIM lifecycle automation, and least-privilege access across the SaaS and cloud estate.
 * Lead Flexport's zero-trust journey - making sure the right people have the right access, with the right controls, verified continuously.

Detection & response

 * Build and tune detection rules in our SIEM, turning signal into actionable alerts, not noise.
 * Lead incident response for security events: triage, contain, remediate, and write the retrospective.

Vulnerability & risk management

 * Run regular assessments of corporate endpoints and prioritize findings by real business risk.
 * Manage vendor and third-party security reviews, working with procurement and legal to evaluate risk before it lands in our environment.

Security enablement & leadership

 * Partner with IT, Engineering, and People teams to embed security into the way we work without creating friction that drives people to workarounds.
 * Develop and maintain runbooks, playbooks, and internal documentation that make the whole team more capable, and mentor engineers earlier in their career.
 * Bring a point of view on how agentic AI tools and browser-based AI assistants change what corporate security needs to watch for., * We come to the office 3 times a week to hang out, whiteboard, and ship together.
 * We have the latest hardware and software, including frontier AI models on day one.
 * We're agile, but not dogmatic. Teams decide how they work best.

Why This Role Is Special

 * Broad ownership: you're not a cog in a large security org - you own the corporate security posture end to end, from endpoints to observability to incident response.
 * Real stakes: Flexport operates in 112 countries with a global workforce. Security here matters at a genuine scale.
 * Build, don't just operate: we want to automate and engineer our way to a stronger posture, not just run playbooks.
 * You're part of PSI: the platform, security, and infrastructure teams work hand in hand at Flexport. We value engineering quality and treat security as infrastructure, not just policy.
 * We sponsor visas for the right candidate.