Security Engineer

Security engineer at Figma, hiring across four Security Engineering teams: AI Security, Platform Security, Product Security and Anti-Abuse. The role is remote-first and can be held from a US hub or anywhere in the United States.

Depending on the team, the engineer runs security assessments, code audits and design reviews of AI infrastructure, cloud and corporate systems or new product features, builds tooling and controls that prevent or detect threats, helps with penetration testing and the bug bounty programme, or builds systems and signals against spam, fraud and abuse. Everyone shares security reviews, vulnerability triage and incident response. Figma wants five or more years as a security or software engineer, sound threat modelling and risk judgement or strong systems design skills, and fluency in at least one general-purpose language.