FigureSecurity Engineer - Enterprise Security
Security Engineer needed to design, implement, and manage security of Figure’s corporate infrastructure, focusing on Zero Trust, Endpoint Security, and SaaS Security.
Figure is an AI Robotics company developing a general purpose humanoid. Our humanoid robot, Figure 02, is designed for commercial tasks and the home. We are based in San Jose, CA and require 5 days/week in-office collaboration. It’s time to build.
We are looking for a Security Engineer to join the Security & Privacy team at Figure, focusing on designing, implementing, and managing security of Figure’s corporate infrastructure.
Responsibilities
- Develop systems and tools to improve the security posture of Figure’s enterprise infrastructure, touching domains such as client platform, corporate networks, as well as SaaS infrastructure
- Build cutting edge security controls to manage Figure enterprise security posture, including corporate Identity, DLP, device hardening, and Zero Trust architectures.
- Review and provide security guidance company wide for infrastructure systems, account lifecycle, fleet management and automation.
- Define and contribute to the team's operational duties (e.g. security reviews, consulting, and on-call), identify areas of improvement by delegating work, improving automation, and runbooks.
Requirements
- Experience in several of the following Enterprise Security Domains: Zero Trust/Beyond Corp, Endpoint Security, Data Loss Prevention, Cryptography and PKI, SaaS Security.
- Strong understanding of federated authentication/authorization technologies (e.g., SAML, SCIM, OPA, OIDC).
- Strong understanding of network security mechanisms, including mTLS, 802.1X, SSH, DNSSEC, Certificate transparency, VPN, and others
- Strong understanding of Email security mechanisms, including DKIM, DMARC, SPF, S/MIME and others
- Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar.
- Experience in common tools and processes of adjacent security domains, esp. Detection and Response.
- Solid knowledge of operating system internals, and experience with several of the following areas: Identity and Access, OS Hardening (macOS, Windows, Linux, ChromeOS), SaaS Security or Assurance and Validation
- Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
- 6+ years of experience as an Enterprise Security focused Security Engineer
- Excellent verbal and written communication skills, with high attention to detail
The US base salary range for this full-time position is between $150,000 - $350,000 annually.