Application Security Engineer

Responsibilities

• ▹Architect, design, and implement end-to-end security solutions (firewalls, intrusion detection, encryption protocols, security event management, cloud security controls)
• ▹Collaborate with DevOps to integrate security into CI/CD pipelines
• ▹Conduct regular security assessments, threat modeling, and architecture reviews
• ▹Lead cross-team initiatives improving security posture while balancing speed and innovation
• ▹Mentor engineers on security best practices
• ▹Actively participate in incident response, on-call rotations, and post-incident reviews
• ▹Improve and run the vulnerability management program: triage, prioritization, remediation tracking, risk reporting
• ▹Manage third-party penetration tests: scoping, vendor coordination, tracking remediation
• ▹Automate sources of toil such as routine patching or dependency upgrades
• ▹Conduct threat modeling and security reviews for new features, partnering with engineering early in design

Requirements

• ▹Strong background in reading and writing code
• ▹Collaborative, hands-on engineering approach
• ▹Experience building and scaling a vulnerability management program
• ▹Experience integrating security into CI/CD pipelines
• ▹Experience managing third-party penetration tests
• ▹Threat modeling and security review experience

Soft skills

What we offer

• ▹Comprehensive medical, dental, and vision coverage, 100% employer-paid premiums on select plans
• ▹Company HSA, FSA, Dependent Care FSA, 401(k), and commuter benefits
• ▹Employer-paid life and disability insurance
• ▹11 observed holidays and PTO plan
• ▹Up to 12 weeks of paid family leave
• ▹Continuing education reimbursement
• ▹Company equity (RSUs)
• ▹25% annual bonus target, paid quarterly

About the company

Figure (NASDAQ: FIGR) is transforming capital markets through blockchain, combining blockchain's transparency and efficiency with AI-driven automation to reimagine how loans are originated, funded, and traded in secondary markets. With 170+ partners, Figure has originated over $22 billion in home equity loans (HELOCs) on its blockchain-native platform, making it the largest non-bank provider of home equity financing in the U.S. Its ecosystem also includes YLDS, an SEC-registered yield-bearing stablecoin.