# Product Security Engineer II [Flexport](https://gurify.com/jobs?q=Flexport) · Amsterdam, Netherlands · Posted 2 months ago [Security](https://gurify.com/jobs/security) [Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/flexport/jobs/7921061) ## Job description ### About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes—from emerging brands to Fortune 500s—use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. ### About Flexport: At Flexport, we believe global trade can move the human race forward. That’s why it’s our mission to make global commerce so easy there will be more of it. We’re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes - from emerging brands to Fortune 500s - use Flexport technology to move more than $19B of merchandise across 112 countries a year. The recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us. ### Product Security Engineer II Flexport is looking for Product Security Engineers to help Flexport establish itself as the most trusted company in the global trade ecosystem. As a Product Security Engineer, you’ll develop a deep understanding of product development and strategy, and will be able to quickly identify and communicate security risks to diverse audiences while offering alternative solutions. All security disciplines work under the umbrella of the combined PSI (Platform, Security & Infrastructure) team: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. Security gains massive leverage by working hand in hand with Platform and Infrastructure, with every element of the team reinforcing each of the others. This is not a role where you wait for tickets. You’ll build the tools that our product teams reach for when they want a secure-by-default solution. You’ll discover what tools to build by working with our product teams at every stage of the software development lifecycle. And you’ll proactively analyze what they produce to find the flaws before the bad guys do. ### What You'll Do ### Strategy & foundations - Build guardrails and AI-accelerated patterns that make secure-by-default the path of least resistance for developers. - Build and maintain security tooling and automation that scales product security. - Respond to emerging threats. ### Design-time & review - Contribute to threat modeling, design reviews, and code reviews with pragmatic guidance that balances risk against velocity. - Partner with engineering to security-review and test new features and services as they're built. ### Vulnerability management - Triage, reproduce, and validate incoming bug bounty submissions and internal security reports. - Cut through SAST, secrets, and vulnerability scanner noise to prioritize real issues and guide developers to effective fixes. - Partner with development teams to drive remediation and track issues through closure. ### Developer enablement - Write clear, actionable security patterns that let developers ship fast and stay secure. - Write and maintain runbooks, developer guidelines, and security documentation that scale the team's practices. - Stay current on web and cloud security trends and bring new findings into product discussions. ### You Should Have - 2–5 years of experience in product/application security or software development with a security focus. - Strong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10). - Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools. - Working knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python). - Working knowledge of at least one major cloud provider (AWS, GCP, Azure). - Hands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar). - Experience improving developer experience (DevEx) security without slowing teams down. - Clear, constructive communicator on technical risk - in writing, in code review, and in conversation. - Collaborative by default: you partner with developers, SREs, and security peers rather than handing down mandates. - Comfortable with security on-call rotation and picking up work across security disciplines when needed. ### Nice to Have - Hands-on experience with bug bounty platforms. - Experience with cloud infrastructure security (AWS, GCP, Azure) and container technologies. - Participation in CTF events or open-source security projects. - Familiarity with threat modeling frameworks and secure SDLC best practices. - Interest in contributing to internal developer security training programs. ### How We Work - In Amsterdam we come to the office 3 times a week to hang out, whiteboard, and ship together. - We stay closely aligned with our coworkers on other continents. - We have the latest hardware and software, including frontier AI models on day one. - We're agile, but not dogmatic. Teams decide how they work best. ### Why This Role Is Special - Massive leverage: every improvement you ship is multiplied across hundreds of engineers and thousands of deploys a day. - Full ownership: from developer research to production rollout to measuring impact, it's yours. - You shape the paved path: the conventions you set and decisions you make become how Flexport engineering builds for years to come. ### What's in it for you - An opportunity to contribute to one of the fastest-growing companies, where you’ll have the chance to create a global impact while being a part of a thriving multinational environment. - Daily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on daily basis. - Commute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam. - 25 working days as vacation days based on full time employment. - Health insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport. - A defined pension contribution scheme. - Equity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success. - Employee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members. - Parental leave benefit: Flexport is here to support you and your families in one of the most important times in life – the birth of a child! Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child. #LI-onsite ### Commitment to Equal Opportunity At Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law. ### Global Data Privacy Notice for Job Candidates and Applicants Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information. **Live in Flexport’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role. We remove it as soon as it disappears at source. ## More jobs like this - WE [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-wetravel-3f868b4d24ac) Wetravel · Amsterdam · yesterday - DA [Senior Specialist Solutions Engineer - Platform Security and Cloud ...](https://gurify.com/job/senior-specialist-solutions-engineer-platform-security-and-cloud-at-c1616db887cb) Databricks · Amsterdam, Netherlands · 6 weeks ago - RE [Lead Physical Security Engineer](https://gurify.com/job/lead-physical-security-engineer-at-reddit-e1db18b35616) Reddit · Amsterdam, Netherlands · 6 weeks ago - CO [Product Security Engineer, North Security](https://gurify.com/job/product-security-engineer-north-security-at-cohere-8f5b2fe1e9a5) Cohere · Canada · last week - ST [Senior Product Security Engineer](https://gurify.com/job/senior-product-security-engineer-at-staffbase-9c270cb1bef2) Staffbase · Germany Remote · last week - AP [Product Security Engineer](https://gurify.com/job/product-security-engineer-at-apolloresearch-7e39c1fe2016) Apolloresearch · London & San Francisco · 2 weeks ago ```json {"@context":"https://schema.org/","@type":"JobPosting","title":"Product Security Engineer II","description":"\u003Ch3\u003EAbout Flexport:\u003C/h3\u003E\u003Cp\u003EAt Flexport, we believe global trade can move the human race forward. That\u2019s why it\u2019s our mission to make global commerce so easy there will be more of it. We\u2019re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes\u2014from emerging brands to Fortune 500s\u2014use Flexport technology to move more than $19B of merchandise across 112 countries a year.\u003C/p\u003E\u003Cp\u003EThe recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.\u003C/p\u003E\u003Ch3\u003EAbout Flexport:\u003C/h3\u003E\u003Cp\u003EAt Flexport, we believe global trade can move the human race forward. That\u2019s why it\u2019s our mission to make global commerce so easy there will be more of it. We\u2019re shaping the future of a $10T industry with solutions powered by innovative technology and exceptional people. Today, companies of all sizes - from emerging brands to Fortune 500s - use Flexport technology to move more than $19B of merchandise across 112 countries a year.\u003C/p\u003E\u003Cp\u003EThe recent global supply chain crisis has put Flexport center stage as we continue to play a pivotal role in how goods move around the world. We are proud to have the support of the best investors in the game who believe in our mission, solutions and people. Ready to tackle global challenges that impact business, society, and the environment? Come join us.\u003C/p\u003E\u003Ch3\u003EProduct Security Engineer II\u003C/h3\u003E\u003Cp\u003EFlexport is looking for Product Security Engineers to help Flexport establish itself as the most trusted company in the global trade ecosystem. As a Product Security Engineer, you\u2019ll develop a deep understanding of product development and strategy, and will be able to quickly identify and communicate security risks to diverse audiences while offering alternative solutions.\u003C/p\u003E\u003Cp\u003EAll security disciplines work under the umbrella of the combined PSI (Platform, Security \u0026amp; Infrastructure) team: we build the paved path and tooling that hundreds of engineers around the world rely on every day to ship. Security gains massive leverage by working hand in hand with Platform and Infrastructure, with every element of the team reinforcing each of the others.\u003C/p\u003E\u003Cp\u003EThis is not a role where you wait for tickets. You\u2019ll build the tools that our product teams reach for when they want a secure-by-default solution. You\u2019ll discover what tools to build by working with our product teams at every stage of the software development lifecycle. And you\u2019ll proactively analyze what they produce to find the flaws before the bad guys do.\u003C/p\u003E\u003Ch3\u003EWhat You\u0026#39;ll Do\u003C/h3\u003E\u003Ch3\u003EStrategy \u0026amp; foundations\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EBuild guardrails and AI-accelerated patterns that make secure-by-default the path of least resistance for developers.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild and maintain security tooling and automation that scales product security.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERespond to emerging threats.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EDesign-time \u0026amp; review\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EContribute to threat modeling, design reviews, and code reviews with pragmatic guidance that balances risk against velocity.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with engineering to security-review and test new features and services as they\u0026#39;re built.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EVulnerability management\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ETriage, reproduce, and validate incoming bug bounty submissions and internal security reports.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECut through SAST, secrets, and vulnerability scanner noise to prioritize real issues and guide developers to effective fixes.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with development teams to drive remediation and track issues through closure.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EDeveloper enablement\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EWrite clear, actionable security patterns that let developers ship fast and stay secure.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWrite and maintain runbooks, developer guidelines, and security documentation that scale the team\u0026#39;s practices.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStay current on web and cloud security trends and bring new findings into product discussions.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EYou Should Have\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E2\u20135 years of experience in product/application security or software development with a security focus.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking knowledge of at least one major cloud provider (AWS, GCP, Azure).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar).\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience improving developer experience (DevEx) security without slowing teams down.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EClear, constructive communicator on technical risk - in writing, in code review, and in conversation.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECollaborative by default: you partner with developers, SREs, and security peers rather than handing down mandates.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EComfortable with security on-call rotation and picking up work across security disciplines when needed.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ENice to Have\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EHands-on experience with bug bounty platforms.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with cloud infrastructure security (AWS, GCP, Azure) and container technologies.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EParticipation in CTF events or open-source security projects.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with threat modeling frameworks and secure SDLC best practices.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInterest in contributing to internal developer security training programs.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EHow We Work\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EIn Amsterdam we come to the office 3 times a week to hang out, whiteboard, and ship together.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWe stay closely aligned with our coworkers on other continents.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWe have the latest hardware and software, including frontier AI models on day one.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWe\u0026#39;re agile, but not dogmatic. Teams decide how they work best.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhy This Role Is Special\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EMassive leverage: every improvement you ship is multiplied across hundreds of engineers and thousands of deploys a day.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFull ownership: from developer research to production rollout to measuring impact, it\u0026#39;s yours.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EYou shape the paved path: the conventions you set and decisions you make become how Flexport engineering builds for years to come.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat\u0026#39;s in it for you\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EAn opportunity to contribute to one of the fastest-growing companies, where you\u2019ll have the chance to create a global impact while being a part of a thriving multinational environment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDaily catered lunches incl. vegetarian options, breakfast, snacks and soft drinks available in our office on daily basis.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECommute expenses: Flexport will cover home-office commuting costs for employees living outside of Amsterdam.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E25 working days as vacation days based on full time employment.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHealth insurance: Flexport offers a collective health insurance plan including a basic package and any available additional packages. Your monthly premium is fully paid by Flexport.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA defined pension contribution scheme.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEquity program: every team member becomes a shareholder, aligning our success with yours. As a private company in a multi-trillion dollar industry, you have a direct stake in our collective growth and success.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EEmployee Assistance Program through Aetna Resources for Living: Flexport provides an employer-sponsored program at no cost to you and your household members.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EParental leave benefit: Flexport is here to support you and your families in one of the most important times in life \u2013 the birth of a child! Our parental leave program allows both mothers and partners to take time off from work for pregnancy, childbirth, and to bond with your new child.\u003C/li\u003E\u003C/ul\u003E\u003Cp\u003E#LI-onsite\u003C/p\u003E\u003Ch3\u003ECommitment to Equal Opportunity\u003C/h3\u003E\u003Cp\u003EAt Flexport, our ability to fulfill our mission of making global commerce easy and accessible relies on having a diverse, dedicated and engaged workforce. All qualified applicants will receive consideration for employment regardless of race, color, religion, sex, national origin, age, physical and mental disability, health status, marital and family status, sexual orientation, gender identity and expression, military and veteran status, and any other characteristic protected by applicable law.\u003C/p\u003E\u003Ch3\u003EGlobal Data Privacy Notice for Job Candidates and Applicants\u003C/h3\u003E\u003Cp\u003EDepending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. By submitting your application, you are agreeing to our use and processing of your data as required. Please see our Privacy Notice available at www.flexport.com/privacy for additional information.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"product-security-engineer-ii-at-flexport-434522279c39"},"url":"https://gurify.com/job/product-security-engineer-ii-at-flexport-434522279c39","datePosted":"2026-06-26","validThrough":"2026-11-02T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Flexport","sameAs":"https://job-boards.greenhouse.io/flexport"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"NL","addressLocality":"Amsterdam"}}} ``` ```json {"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Netherlands","item":"https://gurify.com/jobs/netherlands"},{"@type":"ListItem","position":3,"name":"Product Security Engineer II","item":"https://gurify.com/job/product-security-engineer-ii-at-flexport-434522279c39"}]} ```