Security Engineer, Detection and Response

<div class="content-intro"><p class="p1">Figure is an AI robotics company developing autonomous general-purpose humanoid robots. The goal of the company is to ship humanoid robots with human level intelligence. Its robots are engineered to perform a variety of tasks in the home and commercial markets. Figure is headquartered in San Jose, CA.</p></div><p>We are looking for a Security Engineer to join the Security &amp; Privacy team at Figure, focusing on designing, implementing, and managing the detection and response tooling and processes.</p> <p><strong>Responsibilities:</strong></p> <ul> <li> <p>Design, pilot, and implement central logging and alerting systems to detect malicious activity on Figure's infrastructure, including endpoints, networks, labs, and cloud environments.</p> </li> <li> <p>Develop tools and automation strategies to improve Figure’s ability to hunt threats and respond to incidents.</p> </li> <li> <p>Participate in team operations, such as investigating events generated by the alerting pipeline and triage potential incidents, and drive response efforts in case of an active incident.</p> </li> <li> <p>Identify, analyze, and build threat intelligence on relevant trends in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.</p> </li> </ul> <p><strong>Requirements:</strong></p> <ul> <li> <p>Experience several of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence.</p> </li> <li> <p>Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response.</p> </li> <li> <p>Work record of collaborating with internal and external stakeholders at all levels of a company.</p> </li> <li> <p>Practical experience in a BeyondCorp model.</p> </li> <li> <p>Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar.</p> </li> <li> <p>Solid knowledge of operating system internals (Linux, Windows, macOS), and experience with detection in Cloud environments (Azure, GCP, AWS).</p> </li> </ul> <ul> <li> <p>Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.</p> </li> <li> <p>6+ years of experience in the field of security monitoring or related security role.</p> </li> <li> <p>Excellent verbal and written communication skills, with high attention to detail.</p> </li> </ul> <p>The US base salary range for this full-time position is $150,000 - $300,000 per year.</p> <p class="p1">The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.</p>