Flox
Security Engineer
$160K–$210K
Remote · Remote · Full-time · Posted Apr 28, 2026
- Experience
- 3–5 years of hands-on security engineering experience.
About the job
Build and operate Flox’s security program, implementing hands-on security controls across cloud infrastructure, endpoints, software supply chain, applications, and identity.
What you'll do
- Deploy and manage detection, monitoring, incident response, and cloud security controls across AWS and Cloudflare.
- Secure endpoint devices, build and release pipelines, and applications; integrate scanning tools and manage vulnerability remediation.
- Audit and improve identity and access management, including SSO, MFA, access reviews, and joiner/mover/leaver processes.
What they ask for
- 3–5 years of hands-on security engineering experience, ideally at a software company or in a cloud-native environment.
- Hands-on implementation of security tools and controls, with working knowledge of AWS security services including IAM, SCPs, GuardDuty, Security Hub, and CloudTrail.
- Hands-on Cloudflare experience and experience managing endpoint protection across developer and production environments.
- Experience integrating SAST, SCA, or DAST into CI/CD pipelines; familiarity with software supply chain concepts and scripting or light automation.
Nice to have
- Familiarity with Nix, package management, or reproducible build systems.
- Experience with outsourced SOCs, SIEM deployment or detection engineering, SOC 2 or ISO 27001 audits, or security certifications.
Pay
USD $160K – $210K base salary
Tools
AWS, Cloudflare, Checkov, tfsec, Semgrep, Snyk, GitHub Advanced Security, Python
Model-written summary · the original posting is authoritative