Security Engineer | Figma | Remote (United States)
Posted 2025-09-08
Remote, USA
Full Time
Immediate Start
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Figma is growing our team of passionate people on a mission to make design accessible to all. <a href="https://www.figma.com/blog/meet-us-in-the-browser/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Born on the Web</a>, Figma helps entire product teams <a href="https://www.figma.com/blog/introducing-figjam/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">brainstorm</a>, design and build better products — from start to finish. Whether it’s consolidating tools, simplifying workflows, or collaborating across teams and time zones, Figma makes the design process faster, more efficient, and fun while keeping everyone on the same page. From great products to long-lasting companies, we believe that nothing great is made alone—come <a href="https://www.figma.com/blog/inside-maker-week-more-than-a-hackathon/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">make</a> with us!</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">As a Security Engineer, you will help identify and drive impactful projects to improve the security of Figma’s product, platform, and our IT systems. The mission of the Figma Security team is to help Figmates ship the most secure product to our users. We are looking for security generalists with a strong grasp of Computer Science and security fundamentals. You will partner closely with teams across the company and focus on systemic security improvements and risk reduction. You will also maximize your security skills to support and participate in operational security responsibilities like security reviews and consulting, external research/bug-bounty triage, incident response, and risk management.</p>
<h3 class=" text-white font-semibold text-lg mb-2"></h3>
<h3 class=" text-white font-semibold text-lg mb-2">What you’ll do at Figma:</h3>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Perform technical security assessments, code audits and design reviews.</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Develop technical solutions to help mitigate security vulnerabilities.</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Advocate security and secure practices throughout Figma</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Conduct assessments to identify current and new attack vectors against Figma products and services.</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Help run our pen-testing and offensive security exercises as well as our bug bounty program.</span></li>
</ul>
<h3 class=" text-white font-semibold text-lg mb-2"><strong class=" font-semibold">We’d love to hear from you if you have:</strong></h3>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">6+ years of proven experience working in a Security team</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Good understanding of at least two of Linux/Unix/Mac based systems security, AWS security, Cloud SaaS Security, and web application security</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Proficient in at least one general purpose coding language</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Demonstrated experience engineering security-based tooling and/or software</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Strong communication and interpersonal skills, with demonstrated experience collaborating across functions</span></li>
</ul>
<h3 class=" text-white font-semibold text-lg mb-2"><strong class=" font-semibold">While not required, It’s an added plus if you also have</strong> <strong class=" font-semibold">:</strong></h3>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Demonstrated ability to make hard prioritization decisions in security controls</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Experience in a software engineering role and interested in working on security related projects</span></li>
</ul>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.</p>
<h3 class=" text-white font-semibold text-lg mb-2">Read more about our team</h3>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200"><a href="https://www.figma.com/blog/how-we-enforce-device-trust-on-code-changes/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">How we enforce device trust on code changes</a></span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200"><a href="https://www.figma.com/blog/server-side-sandboxing-an-introduction/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Server-side Sandboxing: An Introduction</a></span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200"><a href="https://www.figma.com/blog/inside-figma-getting-out-of-the-secure-shell/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Inside Figma: getting out of the (secure) shell</a></span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200"><a href="https://www.figma.com/blog/inside-figma-securing-internal-web-apps/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Inside Figma: securing internal web apps</a></span></li>
</ul>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">#LI-Remote</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">#LI-PM3</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3"><strong class=" font-semibold">Pay Transparency Disclosure</strong></p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">If based in Figma’s San Francisco or New York hub offices, this role has the annual base salary range stated below.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. The listed range is a guideline, and the range for this role may be modified. For roles that are available to be filled remotely, the pay range is localized according to employee work location by a factor of between 80% and 100% of range. Please discuss your specific work location with your recruiter for more information.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Figma offers equity to employees, as well a competitive package of additional benefits, including health, dental & vision, retirement with company contribution, parental leave & reproductive or family planning support, mental health & wellness benefits, generous PTO, company recharge days, a learning & development stipend, a work from home stipend, and cell phone reimbursement. Figma also offers sales incentive pay for most sales roles. Figma’s compensation and benefits are subject to change and may be modified in the future. You may view our <a href="https://www.figma.com/pay-transparency-policy-statement/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Pay Transparency Policy</a> by clicking on the corresponding link.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Annual Base Salary Range (SF/NY Hub):</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">$149,000—$350,000 USD</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an <a href="https://www.eeoc.gov/sites/default/files/2022-10/EEOC%5FKnowYourRights%5Fscreen%5Freader%5F10%5F20.pdf" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">equal opportunity workplace</a> – we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status**,** or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to <a href="mailto:accommodations-ext@figma.com" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer">accommodations-ext@figma.com</a>. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Examples of accommodations include but are not limited to:</p>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Holding interviews in an accessible location</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Enabling closed captioning on video conferencing</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Ensuring all written communication be compatible with screen readers</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Changing the mode or format of interviews</span></li>
</ul>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with the applicable candidate section of <a href="https://www.figma.com/privacy/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Figma’s Privacy Policy</a>.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">As a Security Engineer, you will help identify and drive impactful projects to improve the security of Figma’s product, platform, and our IT systems. The mission of the Figma Security team is to help Figmates ship the most secure product to our users. We are looking for security generalists with a strong grasp of Computer Science and security fundamentals. You will partner closely with teams across the company and focus on systemic security improvements and risk reduction. You will also maximize your security skills to support and participate in operational security responsibilities like security reviews and consulting, external research/bug-bounty triage, incident response, and risk management.</p>
<h3 class=" text-white font-semibold text-lg mb-2"></h3>
<h3 class=" text-white font-semibold text-lg mb-2">What you’ll do at Figma:</h3>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Perform technical security assessments, code audits and design reviews.</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Develop technical solutions to help mitigate security vulnerabilities.</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Advocate security and secure practices throughout Figma</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Conduct assessments to identify current and new attack vectors against Figma products and services.</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Help run our pen-testing and offensive security exercises as well as our bug bounty program.</span></li>
</ul>
<h3 class=" text-white font-semibold text-lg mb-2"><strong class=" font-semibold">We’d love to hear from you if you have:</strong></h3>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">6+ years of proven experience working in a Security team</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Good understanding of at least two of Linux/Unix/Mac based systems security, AWS security, Cloud SaaS Security, and web application security</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Proficient in at least one general purpose coding language</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Demonstrated experience engineering security-based tooling and/or software</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Strong communication and interpersonal skills, with demonstrated experience collaborating across functions</span></li>
</ul>
<h3 class=" text-white font-semibold text-lg mb-2"><strong class=" font-semibold">While not required, It’s an added plus if you also have</strong> <strong class=" font-semibold">:</strong></h3>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Demonstrated ability to make hard prioritization decisions in security controls</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Experience in a software engineering role and interested in working on security related projects</span></li>
</ul>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.</p>
<h3 class=" text-white font-semibold text-lg mb-2">Read more about our team</h3>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200"><a href="https://www.figma.com/blog/how-we-enforce-device-trust-on-code-changes/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">How we enforce device trust on code changes</a></span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200"><a href="https://www.figma.com/blog/server-side-sandboxing-an-introduction/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Server-side Sandboxing: An Introduction</a></span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200"><a href="https://www.figma.com/blog/inside-figma-getting-out-of-the-secure-shell/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Inside Figma: getting out of the (secure) shell</a></span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200"><a href="https://www.figma.com/blog/inside-figma-securing-internal-web-apps/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Inside Figma: securing internal web apps</a></span></li>
</ul>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">#LI-Remote</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">#LI-PM3</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3"><strong class=" font-semibold">Pay Transparency Disclosure</strong></p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">If based in Figma’s San Francisco or New York hub offices, this role has the annual base salary range stated below.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. The listed range is a guideline, and the range for this role may be modified. For roles that are available to be filled remotely, the pay range is localized according to employee work location by a factor of between 80% and 100% of range. Please discuss your specific work location with your recruiter for more information.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Figma offers equity to employees, as well a competitive package of additional benefits, including health, dental & vision, retirement with company contribution, parental leave & reproductive or family planning support, mental health & wellness benefits, generous PTO, company recharge days, a learning & development stipend, a work from home stipend, and cell phone reimbursement. Figma also offers sales incentive pay for most sales roles. Figma’s compensation and benefits are subject to change and may be modified in the future. You may view our <a href="https://www.figma.com/pay-transparency-policy-statement/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Pay Transparency Policy</a> by clicking on the corresponding link.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Annual Base Salary Range (SF/NY Hub):</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">$149,000—$350,000 USD</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an <a href="https://www.eeoc.gov/sites/default/files/2022-10/EEOC%5FKnowYourRights%5Fscreen%5Freader%5F10%5F20.pdf" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">equal opportunity workplace</a> – we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status**,** or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to <a href="mailto:accommodations-ext@figma.com" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer">accommodations-ext@figma.com</a>. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities.</p>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">Examples of accommodations include but are not limited to:</p>
<ul class=" text-base sm:text-lg marker:text-color list-inside list-disc text-gray-500 list-disc list-outside pl-3 mb-6">
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Holding interviews in an accessible location</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Enabling closed captioning on video conferencing</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Ensuring all written communication be compatible with screen readers</span></li>
<li class=" leading-snug mb-2 pl-2"><span class="text-gray-200">Changing the mode or format of interviews</span></li>
</ul>
<p class=" text-gray-200 text-base sm:text-lg leading-relaxed mb-3">By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with the applicable candidate section of <a href="https://www.figma.com/privacy/" target="_blank" class="break-all font-medium underline hover:opacity-75" rel="noopener noreferrer nofollow">Figma’s Privacy Policy</a>.</p>