Security Engineer

Flox is seeking its first dedicated Security Engineer to establish security practices that are developer-friendly and suitable for the company's growth stage. The role involves hands-on deployment of security tools, managing cloud and infrastructure security, and ensuring the integrity of the software supply chain. Responsibilities Help evaluate whether to stand up an internal SIEM or work with an outsourced SOC provider—then implement whichever path makes sense for where we are as a company. If building internally: deploy and configure the SIEM, write and tune detection rules, and own the alerting stack. If outsourcing: manage the SOC relationship, define what gets escalated and how, and ensure we’re getting signal not just noiseBuild incident response runbooks and triage workflows—then actually test them (e.g. test backups in case needed for ransomware recovery)Be the person who sees something and does something about itScan and harden our AWS posture hands-on: IAM policies, SCPs, se