Security Engineer - Detection and Response

We are looking for a Security Engineer to join the Security & Privacy team at Figure, focusing on designing, implementing, and managing the detection and response tooling and processes.

Responsibilities:

• Design, pilot, and implement central logging and alerting systems to detect malicious activity on Figure's infrastructure, including endpoints, networks, labs, and cloud environments.
• Develop tools and automation strategies to improve Figure’s ability to hunt threats and respond to incidents.
• Participate in team operations, such as investigating events generated by the alerting pipeline and triage potential incidents, and drive response efforts in case of an active incident.
• Identify, analyze, and build threat intelligence on relevant trends in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Requirements:

• Experience several of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence.
• Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response.
• Work record of collaborating with internal and external stakeholders at all levels of a company.
• Practical experience in a BeyondCorp model.
• Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar.
• Solid knowledge of operating system internals (Linux, Windows, macOS), and experience with detection in Cloud environments (Azure, GCP, AWS).

• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.
• 6+ years of experience in the field of security monitoring or related security role.
• Excellent verbal and written communication skills, with high attention to detail.

The US base salary range for this full-time position is $150,000 - $300,000 per year.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.