Build and tune detections across endpoint, identity, SaaS, and cloud, treating them as software: version-controlled, peer-reviewed, and shipped through the same CI/CD practices the rest of engineering uses
Track detection quality as measured quantities: coverage against MITRE ATT&CK, precision, time-to-detect
Define telemetry requirements for new systems before they ship, working with infrastructure and product teams to close visibility gaps rather than discovering them during an incident
Threat hunt proactively across the estate, converting hypotheses into either new detections or documented coverage
We're in the San Francisco office regularly to work through incidents and detection design in person
We stay closely aligned with teammates on other continents via Slack, video, and async docs
We have the latest hardware and software, including frontier AI models on day one
We're agile, but not dogmatic. Teams decide how they work best
You own your detections end to end, no MSSP, no tier-1 queue, no handing your work to someone else to triage
The consequences here are physical, not abstract: a containment decision can stop a customs filing or freight actually moving, which makes the stakes concrete in a way a SaaS control plane rarely is
You'll inherit a real, established estate with legacy telemetry gaps to close, genuinely underexplored surface area, not a well-mined problem
Where you'll work
This role is based in San Francisco, and we have a strong preference for candidates who are there or willing to relocate — we're deliberately building this team in one place. Relocation support is available for the right candidate
Investing your time with Flexport means having immediate impact, all over the world. You're empowered to do what's best for everyone and trusted to make the right decisions when and where you need them. Join our collective of entrepreneurs and improve the world's experience in global trade
The range displayed on each job posting reflects the minimum and maximum target for new hire base salary for the position in the posting's respective region. Our salary ranges are determined by role, level, and location. Within the range displayed, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education and / or training. Base salary is just one part of our total rewards package at Flexport, which also includes bonus, equity, and comprehensive benefit offerings such as medical, dental, and flexible time off
At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law
Global Data Privacy Notice for Job Candidates and Applicants
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at for additional information
The US base salary range for this position (this does not include bonus, equity and benefits)
$206,181—$252,000 USD