Security Engineer
Flox · Remote · Remote ·
COMPENSATION
$160k – $210k
Listed on the employer's job board (Ashby)
- First security hire
- AWS + Cloudflare
- Hybrid work setup
- Equity included
- 3-5 years exp
As Flox’s inaugural security hire, you will work directly with engineering leadership to establish pragmatic, developer-friendly security controls. You will be responsible for deploying tools, configuring defenses, and closing gaps rather than just advising on policy.
The product manages dependencies and build artifacts for large engineering teams, making security core to the value proposition. You will own the end-to-end implementation of detection, cloud security, and identity management tailored to the company's current stage.
What you'll do
- Evaluate and implement SIEM or manage outsourced SOC provider relationships
- Harden AWS posture including IAM, SCPs, and automated compliance guardrails
- Configure Cloudflare WAF, DDoS protection, Zero Trust, and DLP policies
- Deploy endpoint protection and EDR across developer and production systems
- Integrate SAST and SCA tooling into CI/CD pipelines for vulnerability scanning
- Audit and rationalize IAM access across AWS, Cloudflare, and SaaS applications
- Build incident response runbooks and test recovery procedures regularly
What you'll need
- 3-5 years of hands-on security engineering experience in software or cloud
- Proven track record of implementing security tools rather than just recommending them
- Solid knowledge of AWS security services like GuardDuty and Security Hub
- Hands-on experience with Cloudflare WAF, Zero Trust, or DLP configurations
- Experience deploying endpoint protection (EDR/MDM) in mixed environments
- Familiarity with software supply chain concepts such as SBOMs and SLSA
- Ability to script automation using Python, Bash, or similar languages
Nice to have
- Familiarity with Nix, package management, or reproducible build systems
- Experience evaluating or managing an outsourced SOC relationship
- Prior experience deploying SIEM or working in detection engineering
- Background supporting SOC 2 or ISO 27001 audits
- Holding security certifications like CISSP, OSCP, or AWS Security Specialty
Stack
- AWS
- Cloudflare
- Python
- Bash
- Semgrep
- Snyk
- GitHub Advanced Security
- Nix
How you'll work
- Flexible hybrid work environment
- Small team with short feedback loops
- Direct collaboration with engineering leadership
What you get
- Competitive salary
- Meaningful equity in a well-funded company
- Opportunity to build security program from scratch