Security Engineer, Vulnerability Management and Automation

Figure; San Jose (CA); On-site; USD 150,000 - 350,000; Full time

Job summary

Figure, based in San Jose, CA, is seeking a Security Engineer to enhance the security posture of their enterprise infrastructure. This role involves managing vulnerabilities, implementing security controls, and providing company-wide guidance in a collaborative environment.

The ideal candidate will have 6+ years of experience in Enterprise/Cloud Security and a strong software engineering background. The position offers a competitive salary range between $150,000 - $350,000 annually, based on qualifications and experience.

Qualifications

• Experience as an Enterprise/Cloud focused Security Engineer with 6+ years in the field.
• Strong communication skills with high attention to detail.

Responsibilities

• Develop systems for enhancing security posture across all infrastructure.
• Manage automation for vulnerability management.
• Identify and remediate vulnerabilities in cloud infrastructure.
• Implement security controls for backend services.
• Provide security guidance across company infrastructure.
• Contribute to security team operational duties and improvements.

Skills

Enterprise Security Domains (Zero Trust/Beyond Corp, Endpoint Security, etc.)

Federated authentication/authorization technologies (SAML, SCIM, OPA, OIDC)

Network security mechanisms (mTLS, 802.1X, SSH, DNSSEC)

Service development in multi-cloud environments (Azure, AWS, Google Cloud Platform)

Software engineering in C/C++, Rust, Golang, Python

Detection and Response tools and processes

Operating system internals knowledge (macOS, Windows, Linux, ChromeOS)

Education

Bachelor of Science in Computer Science, Engineering, Information Systems

Job description

Overview

Figure is an AI Robotics company developing a general purpose humanoid. Our humanoid robot, Figure 02, is designed for commercial tasks and the home. We are based in San Jose, CA and require 5 days/week in-office collaboration. It’s time to build.

Responsibilities

• Develop systems and tools to improve the security posture of Figure’s enterprise infrastructure, touching domains such as client platform, corporate networks, as well as SaaS infrastructure
• Build and manage automation for vulnerability management, and help Figure prioritize and address vulnerabilities across the infrastructure
• Identify, triage, and remediate vulnerabilities and misconfigurations for cloud infrastructure and Figure’s backend services
• Design and implement security controls for securing backend services and cloud infrastructure at Figure
• Review and provide security guidance company wide for infrastructure systems, account lifecycle, fleet management and automation.
• Define and contribute to the team's operational duties (e.g. security reviews, consulting, and on-call), identify areas of improvement by delegating work, improving automation, and runbooks.

Qualifications

• Experience in several of the following Enterprise Security Domains: Zero Trust/Beyond Corp, Endpoint Security, Cloud Security, Data Loss Prevention, Cryptography and PKI, SaaS Security.
• Strong understanding of federated authentication/authorization technologies (e.g., SAML, SCIM, OPA, OIDC).
• Strong understanding of network security mechanisms, including mTLS, 802.1X, SSH, DNSSEC, Certificate transparency, VPN, and others
• Experience developing and deploying services in multi-cloud environments, preferably one of the following Azure, AWS or Google Cloud Platform
• Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar.
• Experience in common tools and processes of adjacent security domains, esp. Detection and Response.
• Solid knowledge of operating system internals, and experience with several of the following areas: Identity and Access, OS Hardening (macOS, Windows, Linux, ChromeOS), SaaS Security or Assurance and Validation
• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
• 6+ years of experience as an Enterprise/Cloud focused Security Engineer
• Excellent verbal and written communication skills, with high attention to detail

The US base salary range for this full-time position is between $150,000 - $350,000 annually. The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.