---
title: 'Security Engineer, Enterprise Security at Figure'
canonical: 'https://feeny.ai/job/security-engineer-enterprise-security-figure-san-jose-ecr77fh54z9m'
type: 'job'
last_seen: '2026-09-19'
---

# Security Engineer, Enterprise Security at Figure

- **Company:** Figure
- **Location:** San Jose, CA
- **Posted:** 2026-09-17
- **Last confirmed live:** 2026-09-19
- **Apply:** https://job-boards.greenhouse.io/figureai/jobs/4714390006

## Job description

Figure is an AI Robotics company developing a general purpose humanoid. Our humanoid robot is designed for commercial tasks and the home. We are based in San Jose, CA and require 5 days/week in-office collaboration. It's time to build!

We are looking for a Corporate Security Engineer to join the Security & Privacy team at Figure. Corporate Security owns the environment Figure's people work in: computers, identities, collaboration tools, and the company data flowing through all of it. The design and software behind our humanoid sit inside that environment. We keep access to managed devices, make them hard to compromise, and right-size what each can reach, without getting in the way of the people using them.

We are an engineering team. Controls ship as code, changes are versioned and reviewed, and posture is measured rather than asserted. This is a senior, hands-on individual contributor role. Nobody arrives deep in all of it; we want real depth in one of endpoint engineering, identity and access, or application access design, working knowledge of the rest, and room to build depth here.

## Responsibilities

Endpoints and access

- Build the endpoint hardening controls across macOS, Windows, Linux, and ChromeOS. Our fleet runs on FleetDM, an osquery-based MDM managed through GitOps: you author the control, you write the query proving it landed, and you ship both in a merge request for review.
- Bind data access to a healthy managed device and the person it was issued to: phishing-resistant factors, session lifetimes, and device posture checks.
- Bring AI assistants and coding agents under enterprise management: configuration and permissions delivered and verified like any other endpoint control.

Applications and third parties

- Design application authentication, RBAC, and access lifecycle from first principles: identify what an application exposes, threat model it, propose control requirements, and guide owners to implement them.
- Contribute what each engagement teaches to the team's default deployment playbooks: authentication, logging, and network placement.
- Run security review and governance for SaaS and third parties: vendor assessments, OAuth grants, connector integrations, browser extensions, and data movement through the browser.

Visibility and measurement

- Build the inventories this work depends on: application discovery, application posture management, grant tracking. Feed vulnerability management and build the controls that close what it finds.
- Threat model the corporate attack surface as a repeatable practice and feed the results into what the team works on next. Partner with Detection and Response on telemetry and with IT on rollout.
- Use AI where it earns its place: prepping access reviews, first-pass triage, and analysis that gets a human to a decision faster.

## Requirements

- Software engineering discipline in Python, Bash, PowerShell, or similar: integrations and internal tooling as normal work
- Configuration-as-code and CI/CD applied to corporate infrastructure
- Threat-modeling judgment that separates the problems worth solving from the ones existing controls already cover, and drives the former to completion
- 6+ years in corporate or enterprise security engineering
- Bachelor's in Computer Science, Engineering, or Information Systems, or equivalent experience

Depth required in at least one of the below, knowledge of the others

- Endpoint security on at least two of macOS, Windows, Linux, and ChromeOS: MDM profile engineering, application allowlisting, endpoint security frameworks, and the OS internals behind them. Preferred: fleet-wide osquery telemetry, certificate-based device identity in production, a phased enforcement change shipped with a recovery plan, and devices that live off the corporate network.
- Identity and access: IAM, SaaS security, and zero trust from fundamentals rather than vendor docs, and being able to explain a SAML, OIDC, or SCIM integration for a developer who has never built one. Preferred: mTLS, 802.1X, SSH certificate authorities, and DKIM, DMARC, and SPF in production.
- Application access design: threat modeling what an application exposes, specifying authentication and authorization for the team building it, and designing the provisioning and revocation behind it. Preferred: securing agentic or LLM-integrated systems, including permission models, credential isolation, and egress control.

The US base salary range for this full-time position is between $150,000 - $250,000 annually.

The pay offered for this position may vary based on several individual factors, including job-related knowledge, skills, and experience. The total compensation package may also include additional components/benefits depending on the specific role. This information will be shared if an employment offer is extended.

## About Figure

## Company Overview
- **One-liner**: Figure is an AI robotics company building the world's first commercially viable autonomous general-purpose humanoid robot.
- **Entity Type**: Private (Series C, $1.9B total funding)
- **Headquarters**: San Jose, California, USA
- **Founded**: 2022
- **Founders**: Brett Adcock

## Core Business
- **Primary industry**: AI Robotics / Humanoid Robotics / Machinery Manufacturing
- **Target customers**: Enterprise (manufacturing, logistics, warehousing, retail) and, in future iterations, consumer/home markets.
- **Mission or purpose statement**: To bring a commercially viable general-purpose humanoid to market, making humans capable of more and addressing labor shortages.

## Products & Services
- **Figure 03**: The latest generation humanoid robot, designed for the home and the world at scale. Features a softer look and feel, advanced hand dexterity, and an integrated battery in the torso. It is powered by the company's AI model, Helix.
- **Helix / Helix 02**: Figure's in-house AI model for humanoid control. Helix 02 is described as their most powerful model to date, enabling the robot to perform complex tasks autonomously (e.g., using the whole body to do dishes end-to-end).
- **F.02 Fleet**: The previous generation robot used in a real-world deployment with BMW, where it contributed to the production of 30,000 cars over 11 months, running 10 hours per day.
- **BotQ**: Figure's manufacturing division, responsible for building the robots at scale.

## Market Standing
- **Valuation/Market Cap**: Not publicly disclosed (private company). Total funding is $1.9B.
- **Key Metric**: Total Funding of $1,854,000,000.
- **Notable Investors/Partners**: Parkway Venture Capital (led Series A and Series C), Intel Capital (led Venture Round), Brett Adcock (led Seed Round). Key partner: BMW (11-month deployment).
- **Growth Signals**: Headcount grew 128.8% YoY to 442 employees. Active job postings increased 223.5% YoY. The company is actively scaling its manufacturing arm (BotQ) and commercial operations. It operates in 12 countries.

## Competitive Advantages
- **First-Mover in Commercial Humanoids**: Figure has a significant head start with a real-world, 11-month deployment at a major automaker (BMW), proving the technology's viability.
- **Vertically Integrated AI & Hardware**: Unlike many competitors, Figure builds both the robot hardware and the AI software (Helix) in-house, creating a tightly integrated system.
- **Massive Data Advantage**: Through its "Project Go-Big" and partnership with BMW, Figure is building the world's largest humanoid pretraining dataset, a critical moat in AI.
- **Aggressive Talent Acquisition**: Has hired top talent from Tesla (60), Apple (34), Boston Dynamics (12), SpaceX (9), and others, concentrating deep expertise.

## Strategic Focus
- **Commercial Deployment**: Scaling from pilot programs (BMW) to widespread commercial deployment across logistics, warehousing, and manufacturing.
- **Home Market Entry**: The design of Figure 03 signals a clear strategic pivot toward the consumer/home market as the next major growth vector.
- **AI Leadership**: Continued investment in the Helix AI model to achieve full autonomy and general-purpose capability.
- **Manufacturing Scale**: Building out BotQ to mass-produce humanoid robots.

## Why Work Here
- **Mission-Driven & High Impact**: The company is laser-focused on a singular, ambitious mission: "to build the most groundbreaking company on the planet." Work is described as being "in the trenches together."
- **Culture of Speed & Fearlessness**: Core values include "Move Fast & Be Technically Fearless" and "Aggressively Optimistic." The environment is described as high-performance, with a "championship mindset."
- **On-Site, Collaborative Environment**: Employees work from physical offices in San Jose, CA (HQ) and a secondary location in Sunnyvale. The culture emphasizes in-person collaboration.
- **Generous Benefits**: Offers health insurance, generous parental leave, and family/childcare benefits.
- **Massive Growth Trajectory**: With 110 open roles, explosive headcount growth, and a clear path to market, employees have significant opportunity for career growth and impact.
- **Technical Challenges**: Work spans cutting-edge AI (reinforcement learning, perception, pretraining), hardware engineering (actuators, electrical, mechanical), and manufacturing at scale.

## Sources
1. [figure.ai](https://www.figure.ai/company)
2. [LinkedIn](https://www.linkedin.com/company/figure-ai)
3. [Greenhouse Jobs](http://job-boards.greenhouse.io/figureai)
4. [Built In](https://builtin.com/company/figureai)

## Other roles at Figure

- [Security Engineer - Infrastructure Security](https://feeny.ai/job/security-engineer-infrastructure-security-figure-san-jose-zb6wc4tk8xpe) — San Jose, CA
- [Senior Engineering Technician](https://feeny.ai/job/senior-engineering-technician-figure-san-jose-xwbmahnjsehw) — San Jose, CA
- [IT Client Engineer](https://feeny.ai/job/it-client-engineer-figure-san-jose-98vg4x37e2hz) — San Jose, CA
- [Material Handler, Commercial Operations](https://feeny.ai/job/material-handler-commercial-operations-figure-san-jose-g5v6588s6wwk) — San Jose, CA
- [Senior People Operations Specialist](https://feeny.ai/job/senior-people-operations-specialist-figure-san-jose-y72j2w7sffws) — San Jose, CA
- [Helix Data Creator (SP)](https://feeny.ai/job/helix-data-creator-sp-figure-sao-paulo-sn544m223ydk) — São Paulo, Brazil
- [Technical Program Manager, Security & Privacy](https://feeny.ai/job/technical-program-manager-security-privacy-figure-san-jose-11wr8c99h9vp) — San Jose, CA
- [Warehouse Manager, Commercial Operations](https://feeny.ai/job/warehouse-manager-commercial-operations-figure-san-jose-by7d0fey5yfd) — San Jose, CA
- [State Estimation Engineer - Data Collection Systems](https://feeny.ai/job/state-estimation-engineer-data-collection-systems-figure-san-jose-k6mqbj3tsxwh) — San Jose, CA
- [Senior Gear Design Engineer](https://feeny.ai/job/senior-gear-design-engineer-figure-san-jose-rgs02kgsk5se) — San Jose, CA