Remote Compliance Engineer - Cloud Security & Automation

Figma; Oregon; Hybrid; USD 169,000 - 296,000; Full time

Job summary

Figma is seeking a Compliance Engineer to design, implement, and test security controls across FedRAMP, SOC 2, ISO 27001, and NIST. You will translate regulatory requirements into scalable technical controls, automate evidence collection, and drive continuous monitoring across cloud environments.

This is a full-time role based in the US or remote in the United States. Responsibilities include developing security controls, designing test procedures, and collaborating with security,

Qualifications

• 5+ years of hands-on security compliance experience.
• Experience with FedRAMP, SOC 2, ISO 27001, and NIST 800-53 in SaaS or cloud envs.
• Experience testing security controls for design and operating performance.
• Understanding of IAM, vulnerability management, logging, and security configurations.
• Experience with JSON, REST APIs, and automation applied to compliance engineering.
• Experience collaborating with engineering to implement compliance requirements as technical solutions.

Responsibilities

• Develop and verify technical security controls for multiple compliance frameworks.
• Translate compliance requirements into effective technical controls with cross‑functional teams.
• Design and execute control tests to assess performance and remediation.
• Establish repeatable assessments and continuous monitoring for compliance effectiveness.
• Translate security requirements into machine‑readable JSON definitions to support control management.
• Build API integrations and automated workflows for evidence collection and control validation.
• Identify opportunities to improve control effectiveness and scale compliance operations.

Skills

Security frameworks

Cloud security

Automation

JSON APIs

Security compliance

Job description

Figma is seeking a Compliance Engineer to design, implement, and test security controls across FedRAMP, SOC 2, ISO 27001, and NIST. You will translate regulatory requirements into scalable technical controls, automate evidence collection, and drive continuous monitoring across cloud environments.

This is a full-time role based in the US or remote in the United States. Responsibilities include developing security controls, designing test procedures, and collaborating with security,