Security Engineer - Infrastructure Security
About this role
The team at Figure is building a general-purpose humanoid robot designed for commercial and home environments. The Infrastructure Security Engineer joins the Security and Privacy team to design, implement, and manage security controls and frameworks protecting backend services and infrastructure. Responsibilities include building secure defaults, paved paths, and self-service guardrails while partnering closely with DevOps, Networking, and Detection and Response teams. A successful candidate brings deep expertise in at least one domain like endpoint engineering, identity and access, or application access design, alongside strong software engineering skills and a collaborative approach to shaping the security roadmap.
What you will do
- Collaborate with DevOps and Infrastructure teams to secure the deployment path, service-to-service communication, and network boundaries for AI tooling rollouts.
- Partner with Networking teams to establish data-center and cloud network security measures, including network security groups, segmentation, and private connectivity.
- Enable the Detection and Response team by ensuring all environments generate necessary telemetry and by providing access context during incidents.
- Manage multi-cloud authentication and authorization by implementing centralized single sign-on and workload identity for machine identities.
- Replace long-lived credentials with short-lived, workload-scoped authentication and build just-in-time elevated access mechanisms.
- Develop tooling and pipelines for asset inventory, configuration drift detection, and posture measurement across cloud and on-prem environments.
- Advance zero-trust networking models by enforcing identity-aware access and strict egress controls for internal services.
What you need
- Possess six or more years of security or software development experience.
- Demonstrate strong software engineering capabilities in languages such as C, C++, Rust, Golang, or Python.
- Bring practical security knowledge in areas like Kubernetes, containers, service mesh, operating system internals, or cloud security tools.
- Have experience developing and deploying services across multi-cloud environments, ideally spanning platforms like Azure, AWS, or Google Cloud Platform.
- Hold a Bachelor of Science or Arts in Computer Science, Engineering, Information Systems, or possess equivalent years of professional experience.
- Exhibit excellent verbal and written communication skills paired with high attention to detail.
Nice to have
- Familiarity with zero-trust networking, posture-based access control, and egress or segmentation design.
- Hands-on experience with workload identity, federated credentials, and secrets management.
- Experience delivering security controls as reviewed and versioned code.
- Familiarity with securing AI and machine learning tool usage across infrastructure.
- Track record of building self-service security tooling that scales for fast-moving engineering organizations.
Skills and tech stack
Questions candidates ask
What is the remote work policy for this role?
Figure is based in San Jose, CA and requires 5 days per week of in-office collaboration.
What is the salary range for the position?
The US base salary range for this full-time position is between $150,000 and $250,000 annually, which may vary based on individual factors.
What domains of security knowledge are expected?
Candidates need real depth in one of endpoint engineering, identity and access, or application access design, alongside working knowledge of technologies like Kubernetes, containers, service mesh, and cloud security tools.