Security Engineer, Application Security

Figure; San Jose (CA); On-site; USD 100,000 - 130,000; Full time

Job summary

Figure is seeking a Security Engineer to support the Security & Privacy team, focusing on the security of their robot and associated backend services. Responsibilities include conducting security assessments, designing solutions to mitigate vulnerabilities, and ensuring user privacy.

The ideal candidate will have a strong foundation in web and mobile security, experience with embedded systems, and excellent communication skills. This role requires a BS in Computer Science or equivalent experience and 3+ years in application security.

Qualifications

• Experience in breaking and building complex software systems.
• 3+ years in application security or related security role.
• Strong software engineering skills.

Responsibilities

• Join the Security & Privacy team focusing on security of the robot and backend services.
• Conduct security assessments of applications and embedded systems.
• Design solutions to mitigate security weaknesses.

Skills

Web security

Mobile security

Cryptography

C/C++

Rust

Golang

Python

Penetration testing

Vulnerability research

Secure coding practices

Security architecture & design

Hardware security

Education

BS in Computer Science or equivalent experience

Job description

Responsibilities

• We are looking for a Security Engineer to join the Security & Privacy team at Figure, focusing on security of the robot as well as associated backend services
• Conduct security assessments of applications, embedded systems, back-end services, and business integrations, as well as build tooling for a secure development lifecycle
• Design technical solutions to mitigate security weaknesses on the robot and our service stack. Work with teams across the company to implement them
• Build frameworks and systems to prevent classes of vulnerabilities
• Hunt for vulnerabilities and insecure coding patterns on our product stack (backend services and robot internal systems)
• Be a champion for security and user privacy

Qualifications

• We are looking for excellent security engineers who have experience in breaking and building complex software systems, with experience in AI and embedded systems
• Solid foundation in web security, mobile security, or cryptography
• Passion for learning and helping others
• Excellent verbal and written communication skills, with high attention to detail
• BS in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
• Ability to collaborate with internal and external stakeholders whilst prioritizing tasks and work independently under minimal supervision
• Experience in several of the following application security domains: penetration testing, vulnerability research, security assessment, secure coding practices, security architecture & design, hardware security
• 3+ years of experience in the field of application security or related security role
• Strong software engineering (not scripting or automation) skills in C/C++, Rust, Golang, Python or similar
• Experience with securing embedded systems, including secure boot, secure identity, OTA, or others