# Senior Security Engineer, Detection & Response

**Company**: Flexport
**Location**: Amsterdam
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://job-boards.greenhouse.io/flexport/jobs/8258547?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_ff9d3555-0b0

## Description

## Job Overview

As a Senior Security Engineer, Detection & Response at Flexport, you will play a critical role in detecting and responding to security threats. You will own your detections end-to-end, writing, tuning, and maintaining them, and your team will be paged when they fire.

## Responsibilities

### Detection Engineering

- Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software with version control, peer review, and CI/CD practices.

- Track detection quality metrics such as coverage against MITRE ATT&CK, precision, and time-to-detect.

### Response & Automation

- Own EMEA-hours incident response, including triage, containment, remediation, and writing retrospectives that lead to systemic fixes.

- Develop automation to streamline investigations and collaborate with the US-based team to ensure seamless context transfer across time zones.

### Telemetry & Partnership

- Define telemetry requirements for new systems, working with infrastructure and product teams to close visibility gaps.

- Proactively threat hunt across the estate, converting hypotheses into new detections or documented coverage.

## Requirements

- Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with hands-on experience writing and tuning detections.

- Proficiency in at least one programming language (Python, Go, or similar) and experience writing production-grade detection and automation code.

- Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar).

- Practical incident response experience, having led or played a major role in triaging and closing real security incidents.

## Nice to Have

- Experience treating detections as code with CI/CD, peer review, and staged rollout.

- Experience defining telemetry contracts for systems before they ship.

- A track record of critically evaluating and verifying AI-assisted work.

- Familiarity with EU data-residency and cross-border data-handling considerations.

- Experience with fraud or financial-crime detection patterns.

## How We Work

- In Amsterdam, we come to the office 3 times a week for collaboration and shipping.

- We stay closely aligned with our global coworkers.

- We provide the latest hardware and software, including frontier AI models.

- We work agilely, with teams deciding their best approach.

## Benefits

- Opportunity to contribute to a fast-growing company with global impact.

- Daily catered lunches, breakfast, snacks, and soft drinks.

- Commute expenses covered for employees living outside Amsterdam.

- 25 working days of vacation.

- Health insurance with fully paid premiums.

- Defined pension contribution scheme.

- Equity program making every team member a shareholder.

- Employee Assistance Program through Aetna Resources for Living.

- Parental leave benefit supporting new parents.

## Skills

### Required
- detection engineering
- incident response
- threat hunting
- programming languages (Python, Go)
- SIEM or detection pipeline (Panther, Elastic, Splunk)

### Nice to have
- treating detections as code with CI/CD
- defining telemetry contracts
- AI-assisted work evaluation
- EU data-residency and cross-border data-handling
- fraud or financial-crime detection patterns

---

Source: [Apply at job-boards.greenhouse.io](https://job-boards.greenhouse.io/flexport/jobs/8258547?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)