AppSec Engineer: Secure DevOps & Cloud Defense + Equity

Make Choteau Home; Montana; Remote; USD 120,000 - 154,440; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k)

Paid time off

Paid family leave

Education reimbursement

Job summary

Figure is seeking an Application Security Engineer to secure our software from development through deployment. You will scale vulnerability management, embed secure coding practices, and ensure security standards across the SDLC.

You will collaborate with Engineering, DevOps, and IT to build resilient, scalable security processes integrated into workflows. The ideal candidate will read and write code, lead security initiatives, and mentor engineers in security best practices, while participating

Qualifications

• Experience securing software across the full software development lifecycle.
• Strong coding skills with a security-focused mindset.
• Experience with incident response and post-incident reviews.
• Ability to mentor engineers on security best practices.

Responsibilities

• Architect end-to-end security solutions including enforcible controls and cloud protections.
• Integrate security into CI/CD pipelines for automated secure deployments.
• Conduct regular security assessments, threat modeling, and architecture reviews.
• Lead cross-team security initiatives balancing speed and risk.
• Mentor engineers on security practices and foster secure-by-design culture.
• Participate in incident response and post-incident reviews to improve defenses.

Skills

Secure coding

Vulnerability management

CI/CD security

Threat modeling

Incident response

Security mentoring

Security awareness

Tools

Firewall

IDS/IPS

Encryption protocols

Cloud security controls

Job description

Figure is seeking an Application Security Engineer to secure our software from development through deployment. You will scale vulnerability management, embed secure coding practices, and ensure security standards across the SDLC.

You will collaborate with Engineering, DevOps, and IT to build resilient, scalable security processes integrated into workflows. The ideal candidate will read and write code, lead security initiatives, and mentor engineers in security best practices, while participating