# Staff Security Engineer, Product Security

**Company**: Flexport
**Location**: San Francisco, California
**Work arrangement**: onsite
**Experience**: staff
**Job type**: full-time
**Salary**: $221,484-$270,703 USD
**Category**: Security
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/flexport/jobs/8374701?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/job/staff-security-engineer-product-security-390beb43-ab5/

## Description

## About Flexport:

Flexport believes global trade can drive progress for humanity. With a mission to simplify global commerce, the company uses innovative technology and talented professionals to shape the future of a $10 trillion industry.

## What You'll Do

As a Staff Security Engineer in the Product Security team, you will define and implement security architecture across Flexport's products and services. Your responsibilities will include:

- Defining security architecture and setting patterns for secure-by-default implementation.

- Leading high-risk product feature security reviews and establishing standards for effective reviews.

- Building and scaling a security champions program and product security training.

- Conducting domain-specific threat modeling and attack surface analysis.

- Collaborating with engineering leadership to resolve design trade-offs.

- Managing vulnerability triage, reproduction, and prioritization.

- Driving remediation of systemic vulnerabilities.

- Mentoring engineers and providing technical leadership.

## You Should Have

- 8+ years of experience in product/application security with hands-on experience building security tools and services.

- A track record of designing scalable security architecture.

- Strong understanding of web application security principles and experience with testing tools.

- Proficiency in a modern programming language.

- Experience leading multi-team technical initiatives and mentoring engineers.

## Nice to Have

- Experience with security champions programs.

- Knowledge of identity management and identity federation.

- Familiarity with IaaS cloud infrastructure, Kubernetes, and service-oriented architectures.

- Experience with bug bounty platforms and SAST tools.

## How We Work

- Regular work in the San Francisco office.

- Collaboration with global teammates via Slack, video, and asynchronous documentation.

- Access to the latest hardware and software.

## Why This Role Is Special

- Opportunity to have a broad impact across hundreds of engineers.

- Authority to set security architecture standards.

- Part of a cohesive platform, security, and infrastructure team.

## Location

This role is based in San Francisco, with a preference for candidates willing to relocate.

## Salary Range

The US base salary range for this position is $221,484 - $270,703 USD.

For more fresh new jobs, check out [yubhub.co](https://yubhub.co/).

## Skills

### Required
- product security
- security architecture
- web application security
- application testing tools
- software development
- modern programming languages
- technical leadership
- multi-team technical initiatives

### Nice to have
- security champions program
- identity management
- IaaS cloud infrastructure
- Kubernetes
- bug bounty platforms
- SAST tools

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/flexport/jobs/8374701?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)