Product Security Engineer II

Amsterdam30+ days ago

HybridIn English

About the job

Flexport is looking for a Product Security Engineer II to join its team in Amsterdam. In this hybrid role, you will build secure-by-default guardrails and contribute to threat modeling, design reviews, and code reviews. You'll also maintain security tooling and automation, triage bug bounty submissions, and write security documentation.

What you will do

Build secure-by-default guardrails and AI-accelerated patterns
Maintain security tooling and automation
Contribute to threat modeling, design reviews, and code reviews
Triage and validate bug bounty submissions and internal reports
Write security patterns and documentation
Stay current on web and cloud security trends

What you bring

2–5 years in product/application security or security-focused development
Strong grasp of web application security and OWASP Top 10
Proficiency with Burp Suite, OWASP ZAP, or browser developer tools
Working knowledge of Ruby, Java/Kotlin, TypeScript/JavaScript, or Python
Working knowledge of AWS, GCP, or Azure
Hands-on experience with SAST tools like Cycode, Semgrep, or Snyk

Nice to have

Experience with bug bounty platforms
Cloud infrastructure security and container technologies
CTF events or open-source security projects
Familiarity with threat modeling frameworks and secure SDLC
Interest in developer security training programs

What you get

Daily catered lunches with vegetarian options
Commute expenses covered for employees outside Amsterdam
25 vacation days based on full-time
Collective health insurance fully paid by Flexport
Defined pension contribution scheme
Equity program and parental leave

Summary by Personeel.com. The full job description and the application form are on Flexport's website (job-boards.greenhouse.io); Apply takes you straight there.

More jobs at Flexport

All 11 jobs at Flexport