Application Security Engineer

You will play a pivotal role in securing Figure's software from the first line of code through deployment. You'll build and scale the vulnerability management program, embed secure coding practices into engineering workflows, and help ensure security standards are met at every stage of the software development lifecycle. You'll work closely with Engineering, DevOps, and IT to keep security processes resilient, scalable, and seamlessly integrated into daily workflows.

Responsibilities

• Architect, design, and implement end-to-end security solutions including firewalls, intrusion detection, encryption protocols, security event management, and cloud security controls.
• Collaborate with DevOps to integrate security into CI/CD pipelines, ensuring automation and repeatability of secure deployments.
• Conduct security assessments, threat modeling, and architecture reviews to identify risks and design mitigations.
• Lead cross-team initiatives that improve the security posture while balancing speed and innovation.
• Mentor engineers on security best practices and build a culture of security by design.
• Participate in incident response, on-call rotations, and post-incident reviews.
• Run the vulnerability management program including triage, prioritization, remediation tracking, and reporting.
• Manage third-party penetration tests and remediation tracking.
• Automate routine patching and dependency upgrades.
• Conduct security reviews for new features and services.
• Adhere to company security policies and data handling procedures.
• Complete mandatory security awareness training.
• Report suspected security incidents or suspicious activity to the Security team.

Requirements

• Strong background in reading and writing code.
• Experience with CI/CD pipeline security integration.
• Experience with vulnerability management programs.
• Experience with threat modeling and security architecture reviews.
• Experience managing third-party penetration tests.
• Experience with incident response and on-call rotations.

Benefits

• Comprehensive medical, dental, and vision coverage with 100% employer-paid premiums for employees and dependents on select plans.
• HSA, FSA, Dependent Care FSA, 401(k), and commuter benefits.
• Employer-paid life and disability insurance.
• 11 observed holidays and PTO plan.
• Up to 12 weeks of paid family leave.
• Continuing education reimbursement.
• Company equity in the form of RSUs.