Senior Application Security Engineer

📋 Description

• Own and evolve Figure's vulnerability management program, including triage, prioritization
• Collaborate with DevOps to integrate security gates at various points throughout the software
• Manage third-party penetration tests, including scoping, vendor coordination, and tracking
• Automate sources of toil, such as routine patching or dependency upgrades
• Lead threat modeling, architecture reviews, and security design reviews for new features and
• Lead cross-team initiatives that significantly improve our security posture while balancing speed

🎯 Requirements

• 6-8+ years in application security, product security, or security-focused software engineering role
• Strong coding ability in one or more languages used in modern web/backend development (e.g., Go
• Hands-on experience building or scaling a vulnerability management program
• Experience integrating security tooling into CI/CD (SAST, DAST, SCA, secrets scanning, IaC scanning)
• Familiarity with software supply-chain security and dependency vetting (e.g., Semgrep, Snyk, Socket)
• Deep knowledge of the OWASP Top 10, secure coding patterns, and common vulnerability classes

🎁 Benefits

• Comprehensive medical, dental, and vision coverage with 100% employer-paid premiums for employees
• Company HSA, FSA, Dependent Care FSA, 401(k), and commuter benefits
• Employer-paid life and disability insurance
• 11 observed holidays and PTO plan
• Up to 12 weeks of paid family leave
• Continuing education reimbursement