Security Engineer, Detection and Response

Job description

Job responsibilities

• Design, pilot, and implement central logging and alerting systems to detect malicious activity on Figure's infrastructure, including endpoints, networks, labs, and cloud environments.
• Develop tools and automation strategies to improve Figure’s ability to hunt threats and respond to incidents.
• Participate in team operations, such as investigating events generated by the alerting pipeline and triage potential incidents, and drive response efforts in case of an active incident.
• Identify, analyze, and build threat intelligence on relevant trends in adversary tactics, techniques, and procedures (TTPs) for sophisticated threat actors spanning APTs and cybercrime.

Job requirements

• Experience several of the following detection and response areas: digital forensics, malware analysis, incident management, host/network intrusion detection, threat intelligence.
• Demonstrated knowledge in threat hunting and developing logic to automate threat detection and incident response.
• Work record of collaborating with internal and external stakeholders at all levels of a company.
• Practical experience in a BeyondCorp model.
• Strong software engineering (beyond scripting or automation) skills in C/C++, Rust, Golang, Python or similar.
• Solid knowledge of operating system internals (Linux, Windows, macOS), and experience with detection in Cloud environments (Azure, GCP, AWS).
• Bachelor of Science in Computer Science, Engineering, Information Systems, or equivalent years of experience in a related technical field.
• 6+ years of experience in the field of security monitoring or related security role.