Product Security Engineer II

About the role

Flexport is seeking a Product Security Engineer II to embed security into its global trade platform. You will work closely with product and engineering teams to design, build, and maintain security tooling that enables developers to ship secure code by default.

Key responsibilities

• Build guardrails and AI‑accelerated patterns that make secure‑by‑default the path of least resistance for developers.
• Develop and maintain security tooling and automation that scales across hundreds of engineers.
• Contribute to threat modeling, design reviews, and code reviews, providing pragmatic guidance.
• Triage, reproduce, and validate bug bounty submissions and internal security reports, cutting through scanner noise to prioritize real issues.
• Write clear security patterns, runbooks, and developer guidelines that enable fast, secure shipping.

Required profile

• 2–5 years of experience in product or application security, or software development with a security focus.
• Strong understanding of web application security principles and common attack vectors (e.g., OWASP Top 10).
• Experience with security testing tools and SAST solutions.
• Ability to communicate technical risk clearly in writing, code reviews, and conversations.
• Comfortable participating in on‑call rotation and collaborating across security, SRE, and engineering teams.

Required skills

• OWASP Top 10 knowledge
• Burp Suite or OWASP ZAP
• Python, Java/Kotlin, TypeScript/JavaScript, or Ruby
• AWS, GCP, or Azure cloud platforms
• SAST tools such as Cycode, Semgrep, or Snyk

What we offer

• Daily catered lunches, breakfast, snacks and soft drinks.
• Commute expense reimbursement for employees living outside Amsterdam.
• 25 vacation days per year (full‑time).
• Fully‑paid collective health insurance and pension contributions.
• Equity program giving every team member a share in the company.
• Employee Assistance Program and parental leave benefits.