RemoteLeaf Logo
Log in Sign up

Security Engineer, Product Security

22 hours, 6 minutes ago
United States
Full-time
Mid Level
Security Engineer
Cybersecurity
Agile AWS Azure Burp Suite GCP Java JavaScript Kotlin Python Ruby TypeScript
Apply Now
Flexport

Flexport

Flexport is a global logistics platform that aims to simplify and optimize the process of moving goods around the world. By leveraging technology, Flexport provides end-to-end supply chain solutions, including freight forwarding, customs brokerage, and...

Professional Services
1001-5000
Founded 2013
$2400M raised
View All Jobs 4

Description

  • Define product and service security architecture, patterns, and reference implementations.
  • Lead security engineering reviews for high-risk product features and establish review standards.
  • Build and scale the security champions program and product security training.
  • Lead threat modeling and attack-surface analysis across the product portfolio.
  • Partner with engineering leaders to resolve complex security design tradeoffs.
  • Set standards for triaging, reproducing, and prioritizing bug bounty and internal security reports.
  • Drive remediation of systemic vulnerability classes and handle high-severity cases.
  • Own security services and tooling used by product teams across global infrastructure.
  • Mentor security engineers and serve as the technical authority on product security.

Requirements

  • 2–5 years of experience in product/application security or software development with a security focus.
  • Strong knowledge of web application security principles and common attack vectors, including the OWASP Top 10.
  • Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools.
  • Working knowledge of at least one modern programming language, such as Ruby, Java/Kotlin, TypeScript/JavaScript, or Python.
  • Working knowledge of at least one major cloud provider: AWS, GCP, or Azure.
  • Willingness to participate in a security on-call rotation and support work across security disciplines.
  • Experience with bug bounty platforms (preferred).
  • Experience with SAST tools such as Cycode, Semgrep, Snyk, or similar (preferred).
  • Experience with cloud infrastructure security and container technologies (preferred).
  • Familiarity with threat modeling frameworks, secure SDLC practices, CTF events, open-source security projects, or developer security training (preferred).

Benefits

  • Base salary range of $130,950–$202,125 in California; location-specific ranges apply in Washington, Colorado, New York City, and Illinois.
  • Bonus and equity as part of Flexport's total rewards package.
  • Comprehensive medical and dental benefits.
  • Flexible time off.
  • Latest hardware, software, and access to frontier AI models.
  • Collaboration with global teams through asynchronous and flexible working practices.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

vivenu

Senior Security Engineer - AppSec (d/f/m)

vivenu 51-200 Media

As a Senior Security Engineer – AppSec at vivenu, you will build and scale the application security program for a global ticketing platform serving major live-entertainment brands.

Germany Full-time Senior Security Engineer
Argo CD AWS Azure CI/CD Cybersecurity GCP GitHub GitOps Go Kubernetes Penetration Testing Terraform TypeScript
21 hours, 6 minutes ago
Anchorage Digital

Member of Technical Staff, Security Engineering

Anchorage Digital 201-500 Capital Markets

Join Anchorage Digital’s Security team to build and strengthen cryptographic controls that protect institutional digital-asset infrastructure and customer assets.

United States Full-time Senior Security Engineer
C C++ Encryption Go Rust
21 hours, 6 minutes ago
Zip

Senior Security Engineer I

Zip 1001-5000 Banks

Zip is hiring a Senior Security Engineer to strengthen cloud-native security controls and secure AI adoption across its Azure- and GCP-based BNPL platform.

United States Full-time Senior Security Engineer
$122k-$150k
Agile Azure CI/CD GCP Microservices Network Security Secrets Management
21 hours, 36 minutes ago
Riot Games

Anti-Cheat Engineering Intern (Masters/PhD) - Summer 2027

Riot Games 1001-5000 Internet Software & Services

Join Riot Games’ Anti-Cheat team as an Engineering Intern to research how agentic AI affects software obfuscation and virtualization, helping strengthen protections for fair multiplayer games.

United States Internship Entry Level Security Engineer
$168k-$168k
C C++ Git Python
22 hours, 6 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers