Senior Application Security Engineer

About this role

📋 Description Own and evolve Figure's vulnerability management program, including triage, prioritization Collaborate with DevOps to integrate security gates at various points throughout the software Manage third-party penetration tests, including scoping, vendor coordination, and tracking Automate sources of toil, such as routine patching or dependency upgrades Lead threat modeling, architecture reviews, and security design reviews for new features and Lead cross-team initiatives that significantly improve our security posture while balancing speed 🎯 Requirements 6-8+ years in application security, product security, or security-focused software engineering role Strong coding ability in one or more languages used in modern web/backend development (e.g., Go Hands-on experience building or scaling a vulnerability management program Experience integrating security tooling into CI/CD (SAST, DAST, SCA, secrets scanning, IaC scanning) Familiarity with software supply-chain security and dependency vetting (e.g., Semgrep, Snyk, Socket) Deep knowledge of the OWASP Top 10, secure coding patterns, and common vulnerability classes 🎁 Benefits Comprehensive medical, dental, and vision coverage with 100% employer-paid premiums for employees Company HSA, FSA, Dependent Care FSA, 401(k), and commuter benefits Employer-paid life and disability insurance 11 observed holidays and PTO plan Up to 12 weeks of paid family leave Continuing education reimbursement

Source listing: empllo_remote