Security Engineer, Enterprise Security

About this role

Figure AI Robotics seeks a senior Security Engineer to design and implement enterprise security controls across endpoints, identities, and applications. This hands-on role requires deep expertise in one security domain (endpoint hardening, identity/access, or application security) with working knowledge of the others, using infrastructure-as-code practices.

What you'll do

• Build endpoint hardening controls across macOS, Windows, Linux, and ChromeOS using FleetDM and osquery via GitOps
• Design and implement identity, access controls, and device posture checks to bind data access to healthy devices and authenticated users
• Threat model applications and third-party integrations, specifying authentication, RBAC, and access lifecycle requirements
• Conduct security reviews and vendor assessments for SaaS tools, OAuth grants, and browser extensions
• Build application discovery, posture management, and grant tracking inventories to inform vulnerability management
• Develop repeatable threat modeling practices for the corporate attack surface and partner on detection, response, and rollout

What they're looking for

• Python, Bash, PowerShell, or equivalent scripting
• Configuration-as-code and CI/CD for infrastructure
• Endpoint security (MDM, application allowlisting, osquery)
• Identity and access management (SAML, OIDC, SCIM, zero trust)
• Application threat modeling and access control design
• Phishing-resistant authentication and device identity
• SaaS and third-party security assessment
• LLM/agentic system security (preferred)