Security Engineer, Detection and Response

Figure is an AI robotics company developing autonomous general-purpose humanoid robots. The goal of the company is to ship humanoid robots with human level intelligence. Its robots are engineered to perform a variety of tasks in the home and commercial markets. Figure is headquartered in San Jose, CA.

We are looking for a Security Engineer to join the Security & Privacy team at Figure, focusing on designing, implementing, and managing the detection and response tooling and processes.

Responsibilities:

Design, pilot, and implement central logging and alerting systems to detect malicious activity on Figure's infrastructure, including endpoints, networks, labs, and cloud environments.

Develop tools and automation strategies to improve Figure’s ability to hunt threats and respond to incidents.

Participate in team operations, such as investigating events generated by the alerting pipeline and triage potential incidents, and drive response efforts in case of an active incident.

Identify, analyze, and build threat intelligence on relevant trends in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Requirements:

Experience several of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence.

Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response.

Work record of collaborating with internal and external stakeholders at all levels of a company.

Practical experience in a BeyondCorp model.

Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar.

Solid knowledge of operating system internals (Linux, Windows, macOS), and experience with detection in Cloud environments (Azure, GCP, AWS).

Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.

6+ years of experience in the field of security monitoring or related security role.

Excellent verbal and written communication skills, with high attention to detail.

The US base salary range for this full-time position is $150,000 - $300,000 per year.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.