Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Security Engineer, Product Security

Home > Ruby programming jobs

Security Engineer, Product Security in USA new

  • Flexport
  • Full time
  • Email
  • Remote

Responsibilities

  • Define product and service security architecture, patterns, and reference implementations.
  • Lead security reviews for high-risk product features and advise engineering leadership on security tradeoffs.
  • Lead threat modeling and attack surface analysis across Flexport’s products.
  • Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports.
  • Drive remediation of systemic vulnerability classes.
  • Own security services and tooling used by product teams across the global infrastructure.
  • Build and scale the security champions and product security training programs.
  • Mentor security engineers and serve as the technical authority for product security across engineering leadership.
  • Participate in a security on-call rotation.

Requirements

  • Typically 2–5 years of experience in product/application security or software development with a security focus.
  • Strong understanding of web application security principles and common attack vectors, including the OWASP Top 10.
  • Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools.
  • Working knowledge of at least one modern programming language such as Ruby, Java, Kotlin, TypeScript, JavaScript, or Python.
  • Working knowledge of at least one major cloud provider: AWS, GCP, or Azure.
  • Preferred: hands-on experience with bug bounty platforms.
  • Preferred: experience with SAST tools such as Cycode, Semgrep, Snyk, or similar.
  • Preferred: experience with cloud infrastructure security and container technologies.
  • Preferred: participation in CTF events or open-source security projects.
  • Preferred: familiarity with threat modeling frameworks and secure SDLC practices.
  • Preferred: interest in contributing to internal developer security training programs.

Benefits

  • Base salary ranges vary by US location: California $130,950–$202,125; Washington $147,000–$183,750; Colorado $148,210–$163,688; New York City $147,000–$183,750; Illinois $148,210–$163,688.
  • Total rewards include bonus, equity, medical, dental, and flexible time off.
  • The role collaborates with teammates across continents using Slack, video, and asynchronous documentation.
  • The position includes a security on-call rotation.

Salary: $131k - $202k/yr

Flexport

Our mission is to make global trade so easy that there will be more of it.

Similar positions

Security Engineer, Product Security

  • Flexport
  • Full time
  • USA
  • 11/12/2026
  • Salary: $165k - $202k/yr
  • San Francisco, CA

Senior Application Security Engineer

  • Pennylane SAS
  • Full time
  • Remote
  • 11/11/2026
  • Salary: Competitive
  • Europe, UK

Software Engineer, Financial Data & Payments

  • Gusto
  • Full time
  • USA
  • 11/10/2026
  • Salary: $183k - $245k/yr
  • Remote

Senior Security Engineer - App Sec

  • Kin Insurance
  • Full time
  • USA
  • 11/06/2026
  • Salary: $142k - $160k/yr
  • Remote

Full Stack / Product Engineer

  • Allium
  • Full time
  • Remote
  • 11/06/2026
  • Salary: Competitive
  • Singapore, USA

Listings

by


Job Type

Language

Country

CodingJobBoard.com © 2026