FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in product security architecture, threat modeling, and vulnerability remediation while mentoring engineering teams on secure development practices. Proficient in application security tools and cloud infrastructure security, ensuring robust security measures across products and services.
Highest-signal resume keywords
Product/Application Security ExperienceWeb Application Security PrinciplesApplication Testing Tools ProficiencyCloud Infrastructure Security KnowledgeBug Bounty Platform Experience
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Threat ModelingVulnerability RemediationSecure SDLC Best PracticesModern Programming LanguagesCloud Provider Knowledge
Soft Skills
MentoringCollaborationLeadership
Tools & Technologies
Burp SuiteOWASP ZAPSAST ToolsAWSGCPAzure
Industry Keywords
OWASP Top 10Bug BountyContainer TechnologiesSecurity Champions ProgramCTF Events
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud PlatformJavaJavaScriptKotlinPythonRubySDLCTypeScript
About the role
Key responsibilities & impact- Define security architecture for Flexport's products and services
- Set patterns and reference implementations that make secure-by-default the path of least resistance
- Lead security engineering reviews for the highest-risk product features
- Build and scale the security champions program and product security training
- Lead domain-specific threat modeling and attack surface analysis across Flexport's product surface
- Partner with engineering leadership to resolve senior-level design tradeoffs
- Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports
- Handle the hardest or highest-severity security cases
- Drive remediation of systemic classes of vulnerability
- Own security services and tooling consumed by product teams across global infrastructure
- Mentor other engineers and act as the authoritative technical voice on product security across engineering leadership
Requirements
What you’ll need- Typically 2–5 years of experience in product/application security or software development with a security focus
- Strong grasp of web application security principles and common attack vectors (e.g., OWASP Top 10)
- Proficiency with application testing tools such as Burp Suite, OWASP ZAP, or browser developer tools
- Working knowledge of at least one modern programming language (e.g., Ruby, Java/Kotlin, TypeScript/JavaScript, Python)
- Working knowledge of at least one major cloud provider (AWS, GCP, Azure)
- Comfortable with security on-call rotation and picking up work across security disciplines when needed
- Hands-on experience with bug bounty platforms
- Hands-on experience with SAST tools (Cycode, Semgrep, Snyk, or similar)
- Experience with cloud infrastructure security and container technologies
- Participation in CTF events or open-source security projects
- Familiarity with threat modeling frameworks and secure SDLC best practices
- Interest in contributing to internal developer security training programs
Benefits
Comp & perks- Bonus
- Equity
- Comprehensive medical benefits
- Dental benefits
- Flexible time off
- Latest hardware and software
- Frontier AI models on day one
- Security on-call rotation participation