---
title: 'Senior Application Security Engineer at Figure Lending'
canonical: 'https://feeny.ai/job/senior-application-security-engineer-figure-lending-remote-aekrqswy6xwn'
type: 'job'
last_seen: '2026-10-28'
---

# Senior Application Security Engineer at Figure Lending

- **Company:** Figure Lending
- **Location:** Remote
- **Work type:** remote
- **Posted:** 2026-10-28
- **Last confirmed live:** 2026-10-28
- **Apply:** https://job-boards.greenhouse.io/figure/jobs/8919758002

## Job description

## About Figure

Figure Technology Solutions, Inc. (Nasdaq: FIGR; OPEN: FGRS) is the leading blockchain-native capital marketplace for the origination, funding, sale, and trading of tokenized assets. More than 480 partners use its loan origination system and capital marketplace. Collectively, Figure and its partners have originated over $30 billion of loans to date, among other products. The fastest growing components are Figure Connect, its credit marketplace, and Democratized Prime, Figure’s on-chain lend-borrow marketplace. Figure’s ecosystem also includes DART (Digital Asset Registry Technology) for asset custody and lien perfection, and $YLDS, a yield-bearing stablecoin registered with the SEC as a security under the Securities Act of 1933.

Figure is the market leader in real-world asset (RWA) tokenization. The company has received triple-A ratings from S&P and Moody’s on multiple loan securitizations, the first of its kind for blockchain finance.

We’re proud to be recognized as one of [Forbes’ Top 50 Fintech Companies](https://www.forbes.com/lists/fintech50/) and [CNBC’s World’s Top Fintech Companies](https://www.cnbc.com/worlds-top-fintech-companies-2026/).

## About the Role

As a Senior Application Security Engineer at Figure, you will be pivotal in the security of our software from the first line of code through deployment. You'll own and set the direction for our application security program, build and scale our vulnerability management program, embed secure coding practices into engineering workflows, and help ensure security standards are met at every stage of the software development lifecycle. We’re looking for a collaborative, hands-on senior engineer with a strong background in reading and writing code. You’ll partner closely with Engineering, DevOps, and IT to ensure our security processes are resilient, scalable, and seamlessly integrated into our workflows.

## What You’ll Do

- Own and evolve Figure's vulnerability management program, including triage, prioritization, tracking remediation, and reporting on risk reduction over time.
- Collaborate with DevOps to integrate security gates at various points throughout the software development lifecycle, ensuring automation and repeatability of secure deployments.
- Manage third-party penetration tests, including scoping, vendor coordination, and tracking remediation of findings.
- Automate sources of toil, such as routine patching or dependency upgrades.
- Lead threat modeling, architecture reviews, and security design reviews for new features and services, partnering with engineering teams early in the design process.
- Lead cross-team initiatives that significantly improve our security posture while balancing speed and innovation.
- Define and drive Figure's application security strategy and roadmap, including secure coding standards and security requirements for new services.
- Mentor engineers across the organization and build a security champions program that scales secure development practices.
- Evaluate, select, and own application security tooling and vendors.
- Track program metrics and communicate application security risk to engineering and executive leadership.
- Actively participate in incident response, on-call rotations, and post-incident reviews to continuously improve defenses.
- Leverage AI to augment threat hunting, vulnerability scanning, and triage, using it to surface signal faster and reduce manual review load.
- Design and build AI agents to perform in-depth testing and analysis of our infrastructure and code.

## What We Look For

- 6-8+ years in application security, product security, or a security-focused software engineering role.
- Strong coding ability in one or more languages used in modern web/backend development (e.g., Go, Python, TypeScript/JavaScript, Java/Kotlin) — enough to read unfamiliar code, build tooling and automation, and propose concrete fixes, not just file findings.
- Hands-on experience building or scaling a vulnerability management program, including triage, prioritization, and remediation workflows.
- Experience integrating security tooling into CI/CD (SAST, DAST, SCA, secrets scanning, IaC scanning) and tuning it for signal over noise.
- Familiarity with software supply-chain security and dependency vetting (e.g., SCA platforms, tools like Semgrep, Snyk, Socket, or comparable).
- Deep knowledge of the OWASP Top 10, secure coding patterns, and common vulnerability classes, with the ability to teach them to other engineers.
- Extensive experience leading threat modeling and security design reviews.
- Strong cross-functional collaboration skills and the ability to drive remediation across teams without owning the code yourself.
- Track record of leading application security initiatives end to end, from strategy and roadmap through rollout and measurable results.
- Experience mentoring engineers and acting as a technical leader, including running or growing a security champions program.
- Ability to communicate risk and tradeoffs clearly to both engineers and leadership.
- Deep expertise in at least one area, such as authentication and authorization, cryptography, API security, or cloud-native application security.
- Relentless curiosity and persistence in investigating root causes and driving long-lasting improvements.
- Cloud security exposure (GCP a plus) and prior blockchain/Web3 security experience are pluses, not requirements.
- Familiarity with security and compliance requirements in regulated financial services (e.g., SOC 2, PCI DSS, GLBA) is a plus.
- Hands-on proficiency with AI-assisted security tooling and a practical sense of its strengths and limits.
- Adhere to all company security policies and data handling procedures.
- Complete mandatory security awareness training within required timeframes.
- Promptly report any suspected security incidents or suspicious activity to the Security team.

Salary

- Base Compensation Range: $112,320 - $168,480/yr
- 25% annual bonus target, paid quarterly
- Company equity in the form of RSUs

This is the compensation range for the role in the United States. Actual compensation may vary based on a candidate’s experience, skills, location, internal equity, and evolving business needs. While most offers are generally made within the middle of the range, final compensation is determined based on the factors above.

## Benefits

- Comprehensive medical, dental, and vision coverage, with 100% employer-paid premiums for employees and their dependents on select plans
- Company HSA, FSA, Dependent Care FSA, 401(k), and commuter benefits
- Employer-paid life and disability insurance
- 11 observed holidays and PTO plan
- Up to 12 weeks of paid family leave
- Continuing education reimbursement

Depending on your residential location certain laws might regulate the way Figure manages applicant data. California Residents, please review our [California Employee](https://www.figure.com/ca-employee-privacy-notice/) and [General Workforce Privacy Notice](https://www.figure.com/workforce-privacy-notice/) for further information. By submitting your application, you are agreeing and acknowledging that you have read and understand the above notice.

Figure will not sponsor work visas for this position. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.

#LI-RF1 #LI-Remote

## About Figure Lending

## Company Overview
- **One-liner**: Figure is a financial technology company leveraging blockchain and AI to originate and securitize home equity lines of credit and other consumer loan products.
- **Entity Type**: Public (NASDAQ: FIGR)
- **Headquarters**: New York City, New York, United States
- **Founded**: 2018
- **Founders**: Mike Cagney (Co-Founder, Executive Chairman), June Ou (Co-Founder, Advisor, Board Member)

## Core Business
- **Primary industry**: Financial Services – Consumer Lending / Fintech
- **Target customers**: B2C (homeowners seeking HELOCs, cash-out refinance, crypto-backed loans) and B2B (350+ partner banks, credit unions, fintechs, home improvement companies)
- **Mission / Purpose**: “Building the future of capital markets at the intersection of blockchain and AI” – reducing costs and increasing efficiency in the private credit marketplace.

## Products & Services
- **Figure HELOC**: Home equity line of credit – approval in under 5 minutes, funding in as few as 5 days. Rates as low as 6.75% APR. Borrow up to $750,000. [figure.com](https://www.figure.com/)
- **Crypto-Backed Loan**: Borrow against BTC, ETH, or SOL with interest-only payments for a 12-month term. [figure.com](https://www.figure.com/)
- **DSCR Refinance**: Debt Service Coverage Ratio refinance for real estate investors using rental income (not personal income) for qualification. [figure.com](https://www.figure.com/)
- **Cash-Out Refinance**: Consolidate debt or access equity with a single monthly payment. [figure.com](https://www.figure.com/)
- **Democratized Prime**: Lend cash or crypto for up to 9% yield, or borrow with a Flex Rate Loan. [figure.com](https://www.figure.com/)
- **YLDS Stablecoin**: SEC-approved interest-bearing stablecoin issued by Figure. [figure.com](https://www.figure.com/about/)

## Market Standing
- **Valuation / Market Cap**: Not disclosed (public company; market cap not provided in search results)
- **Key Metrics**:
  - **Annual Revenue**: $506.9M (LinkedIn estimate) [linkedin.com](https://www.linkedin.com/company/figuretechnologies)
  - **Total Funding**: $2.6B across 16 rounds [linkedin.com](https://www.linkedin.com/company/figuretechnologies)
  - **Headcount**: 469 employees (+35.3% YoY) [linkedin.com](https://www.linkedin.com/company/figuretechnologies)
  - **Scale**: $25B+ equity unlocked, 253K+ households served [figure.com](https://www.figure.com/)
  - **Market Position**: #1 non-bank HELOC lender in the U.S.; 40% of HELOC volume transacted on Figure Connect; 75% market share in real-world asset tokenization [figure.com](https://www.figure.com/about/)
- **Notable Investors / Partners**: Goldman Sachs, J.P. Morgan, Barclays, Jefferies (HELOC securitization ratings); Janus Henderson (first sale of crypto-backed loan pool); partnerships with OpenAI GPT, Google Gemini [figure.com](https://www.figure.com/about/)
- **Growth Signals**: Acquired HomeBridge Financial Services (2021); first SEC-approved interest-bearing stablecoin; AAA-rated HELOC securitizations; processing costs slashed 20x in 2025 alone.

## Competitive Advantages
- **Blockchain-native platform** that removes intermediaries, enabling faster approvals and lower costs.
- **AI-enhanced lending** (powered by OpenAI GPT, Google Gemini) for near-instant underwriting.
- **Vertically integrated capital markets platform** – origination, custody, trading, and securitization of whole loans.
- **First-mover status**: First SEC-approved interest-bearing stablecoin, first non-bank to achieve AAA-rated HELOC securitizations.
- **Broad partner network**: 350+ B2B partners embedding Figure’s technology.

## Strategic Focus
- **Expand the capital markets platform** to cover consumer assets beyond home equity (e.g., crypto-backed loans, DSCR refinance).
- **Scale stablecoin (YLDS)** for institutional and retail use.
- **Continue AI and blockchain integration** to further reduce costs and improve speed.
- **Grow loan origination volume** through partner channels and direct-to-consumer digital experience.

## Why Work Here
- **Culture & Values**: “Good people, shared values, & a supportive environment” – emphasis on inclusion, innovation, customer success, and integrity. [figure.com](https://www.figure.com/careers/)
- **Work Model**: Hybrid / remote flexibility – offices in San Francisco, CA; New York, NY; Reno, NV; St. Louis, MO; Charlotte, NC. Many roles listed as “Remote” (e.g., Director, Crypto Protocols; Product Counsel, Crypto). [greenhouse.io](https://job-boards.greenhouse.io/figure/jobs/8451115002)
- **Growth Trajectory**: Rapid headcount growth (+35% YoY) and public-company status signal strong scaling phase.
- **Engineering & Innovation**: Opportunity to work at the intersection of blockchain, AI, and consumer finance; teams building protocols, stablecoins, and AI-driven lending.
- **Diversity & Inclusion**: Equal Opportunity Employer committed to mutual respect. [figure.com](https://www.figure.com/careers/)
- **Perks & Recognition**: Named to Fast Company’s Most Innovative Companies (2024, 2025); Investopedia Best HELOC 2025; Money.com 2025.

## Sources
1. [figure.com/about](https://www.figure.com/about/) – Company overview, metrics, leadership, awards
2. [figure.com](https://www.figure.com/) – Product descriptions, rates, blockchain/AI positioning
3. [figure.com/careers](https://www.figure.com/careers/) – Culture, values, office locations, EEO statement
4. [linkedin.com/company/figuretechnologies](https://www.linkedin.com/company/figuretechnologies) – Headcount, revenue, funding, stock symbol, open positions
5. [job-boards.greenhouse.io/figure](https://job-boards.greenhouse.io/figure/jobs/8451115002) – Current job listings, remote/hybrid indicators

## Other roles at Figure Lending

- [Partnerships Lead, New Verticals](https://feeny.ai/job/partnerships-lead-new-verticals-figure-lending-new-york-3j1a50zs53rj) — New York, NY
- [Customer Success Associate](https://feeny.ai/job/customer-success-associate-figure-lending-reno-hk8f4hxjqr99) — Reno, NV
- [Senior Treasury and FinOps Analyst](https://feeny.ai/job/senior-treasury-and-finops-analyst-figure-lending-remote-n8a06e28kr1x)
- [Senior Financial Portfolio Analyst, Servicing](https://feeny.ai/job/senior-financial-portfolio-analyst-servicing-figure-lending-remote-46m7wjt3ynfm)
- [Associate General Counsel, Corporate & Securities](https://feeny.ai/job/associate-general-counsel-corporate-securities-figure-lending-san-francisco-ne5941mbjysa) — San Francisco, CA / New York, NY
- [Channel Account Executive](https://feeny.ai/job/channel-account-executive-figure-lending-new-york-re8hr01b02k9) — New York, NY
- [Customer Success Associate](https://feeny.ai/job/customer-success-associate-figure-lending-charlotte-151ctgyc6p5j) — Charlotte, NC
- [Senior Pricing Analyst](https://feeny.ai/job/senior-pricing-analyst-figure-lending-new-york-r2v6ms20zhgz) — New York, NY
- [Credit Risk Manager](https://feeny.ai/job/credit-risk-manager-figure-lending-remote-hmbqntzj250b)
- [Workforce Management Forecasting Analyst](https://feeny.ai/job/workforce-management-forecasting-analyst-figure-lending-reno-msvx6d1rhv46) — Reno, NV / Charlotte, NC / Dallas, TX