Manager, Security Operations

Figma Job; San Francisco (CA); On-site; USD 185,000 - 296,000; Full time

Benefits offered by this job

Health benefits

Dental benefits

Vision benefits

Retirement contribution

Generous PTO

Job summary

Figma Job in San Francisco, California is looking for a Security Operations Manager to lead the strategy and execution of their security operations program. This role involves building systems, processes, and tooling to ensure security for Figma and its community.

The ideal candidate has over 7 years of experience in security operations, notably in incident response, with hands-on skills in automation and experience with SIEM and SOAR technologies. The position offers a generous salary and benefits package.

Qualifications

• 7+ years of experience in security operations or incident response.
• Hands-on experience with automation and scripting.
• Expertise in SIEM and SOAR technologies.

Responsibilities

• Own Figma’s security monitoring and incident response program.
• Build and automate security operations workflows.
• Develop incident response documentation.

Skills

Security operations

Incident response

Detection engineering

Automation

SIEM

SOAR

Job description

About the Role

Figma’s Security team is growing, and we’re looking for a Security Operations Manager to lead the strategy and execution of our security operations program. In this role you will build and scale the systems, processes, and tooling that keep Figma and our community safe.

Responsibilities

• Own Figma’s security monitoring and incident response program, from detection engineering through post‑incident review and continuous improvement.
• Build and automate security operations workflows, including alert triage, enrichment, investigation, and response actions using SOAR and custom tooling.
• Develop and maintain incident response run books, escalation procedures, and communication plans for security events of varying severity.
• Lead incident response preparedness initiatives, including tabletop exercises, red‑team engagements, and response capability assessments.
• Improve the effectiveness of our SIEM and SOAR platforms by reducing noise, increasing signal fidelity, and closing detection coverage gaps.
• Build and operationalize threat intelligence capabilities to identify adversary behaviors, prioritize investments, and strengthen detection and response programs.
• Partner with Legal, Privacy, and Communications teams to support breach notification and regulatory response obligations during significant security incidents.
• Drive security operations strategy through vendor management, operational metrics, and cross‑functional initiatives spanning IAM, vulnerability management, DLP, and exposure reduction.

Qualifications

• 7+ years of experience in security operations, incident response, or a related security engineering function.
• Hands‑on experience building and automating detection and response workflows using scripting, APIs, or security automation platforms.
• Deep expertise with SIEM and SOAR technologies in a cloud‑native or SaaS environment.
• Demonstrated success building, scaling, or significantly improving a detection and response program.
• Experience leading complex security incidents and partnering with Legal, Privacy, and business stakeholders during high‑impact events.

Preferred Qualifications

• Experience operating in a public company environment with SOX, ISO27001, SOC2, or FedRAMP requirements.
• Applied AI risk‑management frameworks such as NIST AIRMF, OECD AI Principles, or ISO42001.
• Utilized AI‑powered tools to automate security operations workflows and improve team efficiency.

Salary and Benefits

Annual base salary range: $185,000—$296,000USD. The role offers equity, a competitive benefits package that includes health, dental, vision, retirement with company contribution, parental and reproductive family‑planning support, mental‑health and wellness benefits, generous PTO, company recharge days, a learning and development stipend, work‑from‑home stipend, and cell‑phone reimbursement. For eligible employees a bonus plan and sales incentive pay are available.

Equal Employment Opportunity

Figma is an equal‑opportunity workplace. We are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or expression, veteran status, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

Accommodations for Applicants with Disabilities

We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other privileges of employment. If you require accommodation, please reach out to [e-mail]. Examples of accommodations include, but are not limited to: holding interviews in an accessible location, enabling closed captioning on video conferencing, ensuring written communication is compatible with screen readers, and changing the mode or format of interviews.