Build, tune, version-control, peer-review, and deploy detections across endpoint, identity, SaaS, and cloud environments.
Measure detection quality using coverage, precision, and time-to-detect metrics.
Own EMEA-hours incident response, including triage, containment, remediation, and retrospectives.
Build automation to reduce investigation toil and coordinate incident context across global teams.
Define telemetry requirements for new systems and close visibility gaps with infrastructure and product teams.
Conduct proactive threat hunting and convert findings into detections or documented coverage.
Requirements
Typically 5–8 years of experience in detection engineering, incident response, or threat hunting, with hands-on detection writing and tuning.
Proficiency in at least one programming language such as Python or Go, with the ability to write production-grade detection and automation code.
Experience with a modern SIEM or detection pipeline such as Panther, Elastic, or Splunk.
Practical experience leading or playing a major role in triaging and resolving real security incidents.
Experience with detections as code, CI/CD, peer review, and staged rollout is preferred.
Experience defining telemetry contracts, evaluating AI-assisted work, handling EU data residency and cross-border data considerations, or detecting fraud and financial crime is preferred.
Benefits
Amsterdam employees work from the office three days per week.
Flexport sponsors visas for the right candidate.
Daily catered lunches, breakfast, snacks, and soft drinks are available in the office.
Flexport covers commuting costs for employees living outside Amsterdam.
Full-time employees receive 25 working days of vacation.
Flexport fully pays the monthly premium for its collective health insurance plan.
Defined pension contribution scheme, equity program, employee assistance program, and parental leave are provided.
Employees receive the latest hardware and software and collaborate with global teams.
Flexport
Our mission is to make global trade so easy that there will be more of it.