{"id":1015924,"url":"https://alion.io/job/figure-ai-security-engineer-infrastructure-security","title":"Security Engineer, Infrastructure Security","company":{"id":25,"name":"Figure AI","domain":"figure.ai","url":"https://alion.io/company/figure-ai","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":85,"open_postings":97,"ghost_share":0.165,"stale_share":0,"repost_share":0.021,"time_to_fill_p50_days":174,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Jose, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":250000,"currency":"USD","period":"year","gross":null,"usd_annual":250000},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C++","optional":false},{"name":"GCP","optional":false},{"name":"Go","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"Rust","optional":false},{"name":"Service Mesh","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-17T22:54:03Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-11-04T15:53:49Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":47},"description":"Figure is an AI robotics company developing autonomous general-purpose humanoid robots. The goal of the company is to ship humanoid robots with human level intelligence. Its robots are engineered to perform a variety of tasks in the home and commercial markets. Figure is headquartered in San Jose, CA.\nWe're looking for an Infrastructure Security Engineer to join the Security & Privacy team at Figure, focused on designing, implementing, and managing the security controls and frameworks that protect the company's backend services and infrastructure. This includes building strong foundations that let employees move quickly and safely: secure defaults, paved paths, and self-service guardrails.\nWe are an engineering team. Controls ship as code, changes are versioned and reviewed, and posture is measured rather than asserted. This is a senior, hands-on individual contributor role. Nobody arrives deep in all of it; we want real depth in one of endpoint engineering, identity and access, or application access design, working knowledge of the rest, and room to build depth here. This space is still being built out, so you'll also have latitude to shape the roadmap toward the work you find most interesting.\nResponsibilities:\nPartner across teams\nWork with the DevOps and Infrastructure teams to securely roll out AI tooling across our infrastructure, securing the deployment path, service-to-service communication, and the network boundaries around these workloads.\n\nPartner with the Networking team on data-center and cloud network security: NSGs, segmentation, VPC structure, private connectivity, and egress policy.\n\nEnable the Detection & Response team by making every environment produce the telemetry they need, and provide environment access and context during incidents.\n\nAuthentication / Authorization\nOwn multi-cloud authentication and authorization: centralized SSO for human identities, workload identity and federated credentials for machine identities, and consistent, least-privilege access policy across cloud providers.\n\nExtend that identity model to on-prem and neocloud environments, including hardware-rooted machine identity so all our infrastructure inherits the same authN/authZ guarantees as our cloud backends.\n\nDrive the move away from long-lived reusable credentials toward sealed, short-lived, workload-scoped authentication, and build just-in-time, time-bound elevated access.\n\nVisibility\nMeasure posture: build the tooling and pipelines for asset and identity inventory, configuration drift detection, and coverage metrics across cloud, on-prem, and neocloud environments.\n\nTurn misconfiguration and vulnerability findings into tracked, closed-loop remediation across every environment class.\n\nNetworking\nAdvance our zero-trust networking model as the universal access layer: identity-aware, posture-gated access to internal services with no public IPs and no cross-environment traffic outside the overlay.\n\nDesign and enforce egress controls so workloads can't make arbitrary outbound calls.\n\nDefine the secure-by-default networking patterns other teams build on top of, so segmentation and access rules are versioned, reviewed, and auditable rather than hand-configured.\n\nRequirements:\nExperience and security knowledge of one or more domains and technologies: Kubernetes, containers, service mesh, networking, operating system internals, authentication/authorization protocols, and cloud security tools.\n\nExperience developing and deploying services in multi-cloud environments, preferably familiar with a multi-cloud infrastructure spanning at least two of the three: Azure, AWS, or Google Cloud Platform.\n\n6+ years of security / software development experience.\n\nStrong software engineering skills (not scripting or automation) skills in C/C++, Rust, Golang, Python or similar.\n\nPassion for learning and helping others.\n\nExcellent verbal and written communication skills, with high attention to detail.\n\nBS/BA in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field\n\nBonus Qualifications:\nFamiliarity with zero-trust networking, posture-based access control, and egress/segmentation design.\n\nHands-on with workload identity / federated credentials, and secrets management.\n\nExperience with delivering security controls as reviewed, versioned code.\n\nFamiliarity with securing AI/ML tool usage across infrastructure.\n\nTrack record of building self-service security tooling and paved paths that scale to a fast-moving engineering org.\n\nExperience securing on-prem or neocloud alongside public cloud.\n\nThe US base salary range for this full-time position is $150,000 - $250,000 per year.\nThe pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.","description_format":"text","description_chars":5004,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Robotics AI","Humanoid Robots","Multimodal AI"],"lifecycle":[{"event":"open","at":"2026-09-17T23:13:49Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 23","filings_12m":23,"filings_prev_12m":23,"green_card_filings_12m":0,"median_offered_wage_usd":227500,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":47,"expected_fill_days":174,"reasons":["conf:0","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":250000,"is_top_pay":true},"html_url":"https://alion.io/job/figure-ai-security-engineer-infrastructure-security","json_url":"https://alion.io/job/figure-ai-security-engineer-infrastructure-security.json","meta":{"generated_at":"2026-11-04T18:58:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29217,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":25},"rest":"https://alion.io/mcp/rest/get_company?id=25"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffigure-ai-security-engineer-infrastructure-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffigure-ai-security-engineer-infrastructure-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffigure-ai-security-engineer-infrastructure-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/figure-ai-security-engineer-infrastructure-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffigure-ai-security-engineer-infrastructure-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1015924}},{"tool":"search_jobs","arguments":{"company":"figure.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1015924},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}