Security Engineer, Detection and Response

Figure; San Jose (CA); On-site; USD 150,000 - 300,000; Full time

Job summary

Figure, an AI robotics company headquartered in San Jose, is seeking a Security Engineer to join the Security & Privacy team. You will design, implement, and manage detection and response tooling across Figure’s endpoints, networks, labs, and cloud environments to defend critical infrastructure.

The role requires 6+ years in security monitoring, strong software engineering in C/C++, Rust, Go, or Python, and experience with BeyondCorp and cloud platforms (Azure/GCP/AWS).

Qualifications

• Experience in digital forensics, malware analysis, incident management, and intrusion detection.
• Ability to automate threat detection and incident response.
• Collaborates with internal and external stakeholders at all levels.
• Practical experience in a BeyondCorp model.
• Deep knowledge of OS internals (Linux/Windows/macOS) and cloud security.
• Bachelor's degree in CS/Engineering/Info Systems or equivalent experience.
• 6+ years in security monitoring or related roles.

Responsibilities

• Design, pilot, and implement central logging and alerting systems.
• Develop tools and automation to hunt threats and respond to incidents.
• Investigate events from the alerting pipeline and drive incident response.
• Build threat intelligence on TTPs for APTs and cybercrime.

Skills

Threat hunting

Automation logic

Security monitoring

C/C++

Rust

Go (Golang)

Python

Communication skills

Incident response

Education

Bachelor's degree in CS/Engineering/Info Systems

Tools

Azure

AWS

GCP

Job description

Figure is an AI robotics company developing autonomous general-purpose humanoid robots. The goal of the company is to ship humanoid robots with human level intelligence. Its robots are engineered to perform a variety of tasks in the home and commercial markets. Figure is headquartered in San Jose, CA.

We are looking for a Security Engineer to join the Security & Privacy team at Figure, focusing on designing, implementing, and managing the detection and response tooling and processes.

Responsibilities

• Design, pilot, and implement central logging and alerting systems to detect malicious activity on Figure’s infrastructure, including endpoints, networks, labs, and cloud environments.
• Develop tools and automation strategies to improve Figure’s ability to hunt threats and respond to incidents.
• Participate in team operations, such as investigating events generated by the alerting pipeline and triage potential incidents, and drive response efforts in case of an active incident.
• Identify, analyze, and build threat intelligence on relevant trends in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Requirements

• Experience several of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence.
• Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response.
• Work record of collaborating with internal and external stakeholders at all levels of a company.
• Practical experience in a BeyondCorp model.
• Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar.
• Solid knowledge of operating system internals (Linux, Windows, macOS), and experience with detection in Cloud environments (Azure, GCP, AWS).
• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.
• 6+ years of experience in the field of security monitoring or related security role.
• Excellent verbal and written communication skills, with high attention to detail.

The US base salary range for this full-time position is $150,000 - $300,000 per year.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.