FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in product and application security, with a strong focus on security architecture, vulnerability remediation, and mentoring engineering teams. Proficient in building security tools and services, and skilled in identity management and cloud infrastructure.
Highest-signal resume keywords
Product/Application Security ExperienceSecurity Architecture DesignApplication Testing Tools ProficiencyIdentity Management ExperienceIaaS Cloud Infrastructure Knowledge
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Security ArchitectureWeb Application Security PrinciplesSecurity Tools DevelopmentCode AuditsThreat ModelingAttack Surface AnalysisBug Bounty ManagementVulnerability RemediationMulti-Team Technical InitiativesMentoring Engineers
Soft Skills
LeadershipCollaborationMentoring
Tools & Technologies
Burp SuiteOWASP ZAPCycodeSemgrepSnykKubernetesContainersService-Oriented Architectures
Industry Keywords
Identity FederationSAMLOAuthSCIMIaaS
Tech Stack
Tools & technologiesCloudJavaKotlinKubernetesPythonRubyTypeScriptGo
About the role
Key responsibilities & impact- Define security architecture for Flexport's products and services
- Set secure-by-default patterns and reference implementations
- Lead security engineering reviews for the highest-risk product features
- Build and scale the security champions program and product security training
- Lead domain-specific threat modeling and attack surface analysis across Flexport's product surface
- Partner with engineering leadership to resolve senior-level design tradeoffs
- Set standards for triaging, reproducing, and prioritizing bug bounty submissions and internal security reports
- Handle the hardest or highest-severity security cases
- Drive remediation of systemic vulnerability classes
- Own security services and tooling consumed by product teams across global infrastructure
- Mentor engineers and serve as the authoritative technical voice on product security across engineering leadership
Requirements
What you’ll need- Typically 8+ years of experience in product/application security
- Hands-on experience building security tools and services
- Track record of designing security architecture that scales across many teams and services
- Strong grasp of web application security principles
- Hands-on experience with application testing tools such as Burp Suite, OWASP ZAP, or similar
- Software development experience building security tools in at least one modern language: Go, Python, Java/Kotlin, TypeScript, Ruby, or similar
- Track record of leading multi-team technical initiatives and mentoring engineers into senior roles
- Experience running or scaling a security champions program
- Identity management and identity federation experience with SAML, OAuth, or SCIM
- Experience with IaaS cloud infrastructure, Kubernetes, containers, and service-oriented architectures
- Hands-on experience with bug bounty platforms and SAST tools such as Cycode, Semgrep, Snyk, or similar
- Experience performing code audits on internal or open-source libraries before production release
Benefits
Comp & perks- Bonus
- Equity
- Comprehensive medical benefits
- Dental benefits
- Flexible time off
- Latest hardware and software
- Frontier AI models on day one
