Senior Security Engineer, Detection & Response

Job Overview

As a Senior Security Engineer, Detection & Response at Flexport, you will play a critical role in detecting and responding to security threats. You will own your detections end-to-end, writing, tuning, and maintaining them, and your team will be paged when they fire.

Responsibilities

Detection Engineering

• Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software with version control, peer review, and CI/CD practices.
• Track detection quality metrics such as coverage against MITRE ATT&CK, precision, and time-to-detect.

Response & Automation

• Own EMEA-hours incident response, including triage, containment, remediation, and writing retrospectives that lead to systemic fixes.
• Develop automation to streamline investigations and collaborate with the US-based team to ensure seamless context transfer across time zones.

Telemetry & Partnership

• Define telemetry requirements for new systems, working with infrastructure and product teams to close visibility gaps.
• Proactively threat hunt across the estate, converting hypotheses into new detections or documented coverage.

Requirements

• Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with hands-on experience writing and tuning detections.
• Proficiency in at least one programming language (Python, Go, or similar) and experience writing production-grade detection and automation code.
• Experience with a modern SIEM or detection pipeline (Panther, Elastic, Splunk, or similar).
• Practical incident response experience, having led or played a major role in triaging and closing real security incidents.

Nice to Have

• Experience treating detections as code with CI/CD, peer review, and staged rollout.
• Experience defining telemetry contracts for systems before they ship.
• A track record of critically evaluating and verifying AI-assisted work.
• Familiarity with EU data-residency and cross-border data-handling considerations.
• Experience with fraud or financial-crime detection patterns.

How We Work

• In Amsterdam, we come to the office 3 times a week for collaboration and shipping.
• We stay closely aligned with our global coworkers.
• We provide the latest hardware and software, including frontier AI models.
• We work agilely, with teams deciding their best approach.

Benefits

• Opportunity to contribute to a fast-growing company with global impact.
• Daily catered lunches, breakfast, snacks, and soft drinks.
• Commute expenses covered for employees living outside Amsterdam.
• 25 working days of vacation.
• Health insurance with fully paid premiums.
• Defined pension contribution scheme.
• Equity program making every team member a shareholder.
• Employee Assistance Program through Aetna Resources for Living.
• Parental leave benefit supporting new parents.