14 hours ago
San Francisco, CA, USA or New York, NY, USAIntern
H1B sponsor
Responsibilities
- Perform technical security assessments, code audits, and design reviews.
- Design and develop solutions to prevent or mitigate security vulnerabilities across Figma’s products, services, and infrastructure.
- Support security investigations by developing datasets, tooling, and analysis to scope incidents, determine root cause, and improve detection and response.
- Translate threat intelligence into detection coverage, hardened high-risk surfaces, and security strategy.
- Participate in security reviews, consulting, vulnerability triage, and security incident response.
Requirements
- Be currently enrolled as a fourth- or fifth-year senior PhD student in Computer Science, focusing on Security or a related field.
- Be proficient in at least one general-purpose coding language.
- Have applied security techniques to academic or industry projects and possess strong knowledge in a relevant area such as AI safety/evaluation, usable security, anti-abuse, anti-fraud, or detection and response.
- Have strong knowledge of statistical methods and/or experimental design.
- Demonstrate experience solving sophisticated problems and evaluating alternative solutions, trade-offs, and viewpoints.
- Preferred qualifications include related industry experience, security publications at leading conferences, cross-functional collaboration experience, experience using AI coding tools, and knowledge of at least two specified systems or security domains.
Benefits
- 12- or 16-week internship based at Figma’s San Francisco or New York hub, starting in May or June 2027.
- $74 per hour in base pay, plus a housing stipend and travel reimbursement.
- In-person onboarding is required, and reasonable workplace accommodations are available.
About Figma
Figma builds a browser-based platform for interface design, prototyping, whiteboarding, and developer handoff used by product, design, and engineering teams. Its main products—Figma Design and FigJam—are sold as SaaS with tiered subscriptions for individuals, teams, and enterprises, plus an ecosystem of plugins and integrations. Founded in 2012 and headquartered in San Francisco, the company is privately held and enables real-time collaboration on the web and desktop apps.