Security Engineer Infrastructure Security
Figure is an AI robotics company developing general-purpose humanoid robots, embodied AI, and data-collection services for home and commercial use.
Funding history
About Figure
Figure develops the Figure 03 humanoid robot and Helix, its vision-language-action AI system, to autonomously perform household and commercial tasks. It also operates Index, a contributor network and app for collecting real-world task data.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will secure AI tooling, cloud and data-center networks, and service communications. You will own multi-cloud authentication and authorization, improve workload identity and credential controls, build posture and remediation systems, and define zero-trust network, egress, segmentation, and secure-by-default infrastructure patterns.
Requirements
- Security knowledge of Kubernetes, containers, service mesh, networking, operating system internals, authentication and authorization protocols, or cloud security tools
- Experience developing and deploying services in multi-cloud environments
- Familiarity with at least two of Azure, AWS, or Google Cloud Platform
- 6+ years of security or software development experience
- Strong software engineering skills in C, C++, Rust, Golang, Python, or similar
- Excellent verbal and written communication skills
Responsibilities
- Secure AI tooling deployments, service communications, and network boundaries
- Partner on data-center and cloud network security
- Provide telemetry, access, and context for incident response
- Own multi-cloud authentication and authorization
- Extend identity controls to on-premises and neocloud environments
- Replace long-lived credentials with short-lived, workload-scoped authentication
- Build tooling for inventory, configuration drift detection, and coverage metrics
- Drive remediation for misconfigurations and vulnerabilities
- Design zero-trust networking, egress controls, and secure-by-default network patterns
