Security Engineer, Application Security

Figure AI; San Jose (CA); On-site; USD 150,000 - 350,000; Full time

Job summary

Figure AI in San Jose, CA, is seeking a Security Engineer to join the Security & Privacy team, focusing on security of the robot as well as backend services. You will assess applications, embedded systems, back-end services, and build tooling for a secure development lifecycle.

The ideal candidate has 3+ years in application security, strong software engineering skills in C/C++, Rust, Golang, or Python, and experience with embedded systems security (secure boot, OTA).

Qualifications

• 3+ years of experience in application security or related security role.
• Experience in breaking and building complex software systems, with AI and embedded systems.
• Strong knowledge of web/mobile security or cryptography.

Responsibilities

• Conduct security assessments of applications, embedded systems, back-end services, and business integrations, and build tooling for a secure development lifecycle
• Design technical solutions to mitigate security weaknesses on the robot and our service stack. Work with teams across the company to implement them.
• Build frameworks and systems to prevent classes of vulnerabilities.
• Hunt for vulnerabilities and insecure coding patterns on our product stack (backend services and robot internal systems).
• Be a champion for security and user privacy.

Skills

C/C++

Rust

Golang

Python

Embedded systems security

Web security

Cryptography

Education

BS in Computer Science, Engineering, Information Systems or related field

Tools

Secure boot

OTA

Vulnerability research

Job description

Figure is an AI robotics company developing autonomous general-purpose humanoid robots. The goal of the company is to ship humanoid robots with human level intelligence. Its robots are engineered to perform a variety of tasks in the home and commercial markets. Figure is headquartered in San Jose, CA.

We are looking for a Security Engineer to join the Security & Privacy team at Figure, focusing on security of the robot as well as associated backend services. We are looking for excellent security engineers who have experience in breaking and building complex software systems, with experience in AI and embedded systems.

Responsibilities:

• Conduct security assessments of applications, embedded systems, back-end services, and business integrations, as well as build tooling for a secure development lifecycle




• Design technical solutions to mitigate security weaknesses on the robot and our service stack. Work with teams across the company to implement them.




• Build frameworks and systems to prevent classes of vulnerabilities.




• Hunt for vulnerabilities and insecure coding patterns on our product stack (backend services and robot internal systems).




• Be a champion for security and user privacy.

Requirements:

• Experience in several of the following application security domains: penetration testing, vulnerability research, security assessment, secure coding practices, security architecture & design, hardware security.




• Strong software engineering (not scripting or automation) skills in C/C++, Rust, Golang, Python or similar.




• Experience with securing embedded systems, including secure boot, secure identity, OTA, or others.




• Solid foundation in web security, mobile security, or cryptography.




• Ability to collaborate with internal and external stakeholders whilst prioritizing tasks and work independently under minimal supervision.




• BS in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.




• 3+ years of experience in the field of application security or related security role.




• Passion for learning and helping others.




• Excellent verbal and written communication skills, with high attention to detail.

The US base salary range for this full-time position is $150,000 to $350,000 per year.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.