7 hours ago
San Jose, CA, USASenior
Base Salary
$150k - $250k/yr
Responsibilities
- Build endpoint hardening controls across macOS, Windows, Linux, and ChromeOS using FleetDM, osquery, and Git-reviewed control changes.
- Implement device posture, phishing-resistant authentication factors, session-lifetime controls, and application access tied to managed devices and users.
- Manage AI assistants and coding agents through enterprise endpoint configuration and permissions controls.
- Design application authentication, RBAC, access lifecycles, provisioning, revocation, logging, and network placement.
- Conduct SaaS and third-party security reviews covering vendor assessments, OAuth grants, connector integrations, browser extensions, and browser-based data movement.
- Build application discovery, application posture, grant-tracking, and vulnerability-management controls.
- Threat model the corporate attack surface and partner with Detection and Response on telemetry and IT on rollout.
- Use AI-assisted workflows for access reviews, triage, and analysis.
Requirements
- At least 6 years of corporate or enterprise security engineering experience.
- Software engineering discipline in Python, Bash, PowerShell, or similar for integrations and internal tooling.
- Experience applying configuration-as-code and CI/CD to corporate infrastructure.
- Threat-modeling judgment and the ability to drive identified security problems to completion.
- Bachelor’s degree in Computer Science, Engineering, or Information Systems, or equivalent experience.
- Deep expertise in at least one of endpoint security, identity and access, or application access design, with working knowledge of the others.
- For endpoint specialization, experience with at least two of macOS, Windows, Linux, and ChromeOS and related MDM, allowlisting, security-framework, and OS-internals work.
- For identity and access specialization, experience with IAM, SaaS security, zero trust, and integrations such as SAML, OIDC, or SCIM.
- For application access specialization, experience threat modeling applications and designing authentication, authorization, provisioning, and revocation.
Benefits
- This is a full-time position based in San Jose, California, requiring five days per week of in-office collaboration.
- Additional compensation and benefits components may be included and shared if an employment offer is extended.
About Figure AI
Figure AI builds general‑purpose autonomous humanoid robots and the AI software that powers them, targeting tasks in industrial, commercial, and eventually residential settings. The privately held company monetizes through robotics hardware and related software/services aimed at enterprises seeking automation. Founded in 2022 and headquartered in San Jose, California, it has announced a partnership with BMW Manufacturing to pilot humanoid robots in automotive production.