Security Engineer - D&r at Figure AI

What you'd actually do

Design, pilot, and implement central logging and alerting systems to detect malicious activity on Figure's infrastructure, including endpoints, networks, labs, and cloud environments

Develop tools and automation strategies to improve Figure’s ability to hunt threats and respond to incidents

Participate in team operations, such as investigating events generated by the alerting pipeline and triage potential incidents, and drive response efforts in case of an active incident

Identify, analyze, and build threat intelligence on relevant trends in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Skills

Required

digital forensics
malware analysis
incident management
host/network intrusion detection
threat intelligence
threat hunting
automation strategies
software engineering
C/C++
Rust
Golang
Python
operating system internals (Linux, Windows, macOS)
detection in Cloud environments (Azure, GCP, AWS)
BeyondCorp model

Nice to have

Excellent verbal and written communication skills
high attention to detail

Figure is an AI Robotics company developing a general purpose humanoid. Our humanoid robot, Figure 02, is designed for commercial tasks and the home. We are based in San Jose, CA and require 5 days/week in-office collaboration. It’s time to build.

We are looking for a Security Engineer to join the Security & Privacy team at Figure, focusing on designing, implementing, and managing the detection and response tooling and processes.

Responsibilities:

Design, pilot, and implement central logging and alerting systems to detect malicious activity on Figure's infrastructure, including endpoints, networks, labs, and cloud environments
Develop tools and automation strategies to improve Figure’s ability to hunt threats and respond to incidents
Participate in team operations, such as investigating events generated by the alerting pipeline and triage potential incidents, and drive response efforts in case of an active incident
Identify, analyze, and build threat intelligence on relevant trends in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Requirements:

Experience several of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence
Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response
Work record of collaborating with internal and external stakeholders at all levels of a company
Practical experience in a BeyondCorp model
Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar
Solid knowledge of operating system internals (Linux, Windows, macOS), and experience with detection in Cloud environments (Azure, GCP, AWS)
Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field
6+ years of experience in the field of security monitoring or related security role
Excellent verbal and written communication skills, with high attention to detail

The US base salary range for this full-time position is between $150,000 - $350,000 annually.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.