App Security Engineer - Secure DevOps & Threat Modeling

Figure; United States; On-site; USD 120,000 - 154,440; Full time

Benefits offered by this job

Medical, dental, vision coverage

Company 401(k) and commuter benefits

Paid holidays and PTO

Job summary

Figure is seeking an Application Security Engineer in the United States to secure our software from code to deployment. You will build and scale our vulnerability management program, embed secure coding into engineering workflows, and ensure security standards are met at every stage of the lifecycle.

Work closely with Engineering, DevOps, and IT to create resilient, scalable security processes. You’ll mentor engineers, participate in incident response, and lead initiatives that raise our

Qualifications

• Author of secure coding standards and guidance for developers.
• Experience implementing secure development lifecycle practices.
• Proven ability to assess security risks in software architectures.

Responsibilities

• Architect and implement end-to-end security controls across cloud and on-premise environments.
• Integrate security into CI/CD pipelines with DevOps for repeatable secure deployments.
• Perform threat modeling, risk assessments, and architectural reviews.
• Lead cross-team security initiatives and mentor engineers in secure practices.
• Participate in incident response and post-incident reviews.

Skills

Vulnerability management

Incident response

Threat modeling

Secure coding

DevSecOps

Mentoring

Tools

CI/CD tools

Job description

Figure is seeking an Application Security Engineer in the United States to secure our software from code to deployment. You will build and scale our vulnerability management program, embed secure coding into engineering workflows, and ensure security standards are met at every stage of the lifecycle.

Work closely with Engineering, DevOps, and IT to create resilient, scalable security processes. You’ll mentor engineers, participate in incident response, and lead initiatives that raise our