Security Engineer, Detection and Response

<div class="content-intro"><p class="p1">Figure is an AI robotics company developing autonomous general-purpose humanoid robots. The goal of the company is to ship humanoid robots with human level intelligence. Its robots are engineered to perform a variety of tasks in the home and commercial markets. Figure is headquartered in San Jose, CA.</p></div><p>We are looking for a Security Engineer to join the Security & Privacy team at Figure, focusing on designing, implementing, and managing the detection and response tooling and processes.</p>

<p><strong>Responsibilities:</strong></p>

<ul>

<li>Design, pilot, and implement central logging and alerting systems to detect malicious activity on Figure's infrastructure, including endpoints, networks, labs, and cloud environments.</li>

<li>Develop tools and automation strategies to improve Figure’s ability to hunt threats and respond to incidents.</li>

<li>Participate in team operations, such as investigating events generated by the alerting pipeline and triage potential incidents, and drive response efforts in case of an active incident.</li>

<li>Identify, analyze, and build threat intelligence on relevant trends in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.</li>

</ul>

<p><strong>Requirements:</strong></p>

<ul>

<li>Experience several of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence.</li>

<li>Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response.</li>

<li>Work record of collaborating with internal and external stakeholders at all levels of a company.</li>

<li>Practical experience in a BeyondCorp model.</li>

<li>Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar.</li>

<li>Solid knowledge of operating system internals (Linux, Windows, macOS), and experience with detection in Cloud environments (Azure, GCP, AWS).</li>

</ul>

<ul>

<li>Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.</li>

<li>6+ years of experience in the field of security monitoring or related security role.</li>

<li>Excellent verbal and written communication skills, with high attention to detail.</li>

</ul>

<p>The US base salary range for this full-time position is $150,000 - $300,000 per year.</p>

<p class="p1">The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.</p>