Security Scientist

As a Security Scientist, you will leverage your data analysis skills and help identify and drive impactful projects to improve the safety and security of Figma's product, platform, and our IT systems. The mission of the Figma Security team is to help Figmates ship the most secure and safe product to our users. We are looking for security scientists with a strong grasp of security and anti-abuse fundamentals. You will partner closely with teams in Security Engineering as well as teams across the company to focus on systemic security and safety improvements and risk reduction. You will also apply your security expertise and analytical skills to support and participate in security design reviews and consulting, incident response, and risk management.

This is a full time role that can be held from one of our US hubs or remotely in the United States.

What you'll do at Figma:

• Collaborate cross-functionally across the company to understand existing security and anti-abuse problems and work with engineering, product, data science, and other teams on solutions
• Understand attacker and user behavior on the Figma platform and inside Figma through creation of new datasets, metrics, experimentation, etc., and guide strategy and decision making
• Build detections, tune signal quality, and measure coverage across Figma's products, platforms, and internal systems, turning attacker behavior into durable, data-driven detections
• Lead and support security investigations, developing the datasets, tooling, and analysis that help us scope incidents, understand root cause, and reduce time to detect and respond
• Translate threat intelligence into action, operationalizing intel on relevant threat actors and techniques to prioritize detection coverage, harden high-risk surfaces, and guide security strategy
• Conduct investigations and design reviews to identify current and new attack vectors against Figma products and services
• Advocate for security and secure practices throughout Figma

We'd love to hear from you if you have:

• Strong understanding of real-world security, anti-abuse, and detection and response challenges
• Fluency in SQL, with proficiency in Python, R, or a similar scripting language
• Experience working with distributed data processing systems and frameworks such as Hive, Redshift, Presto, Snowflake, or Spark
• Strong knowledge of statistical methods and experimental design
• Excellent judgment and creative problem-solving skills

While it's not required, it's an added plus if you also have:

• A self-starting mindset along with strong communication and collaboration skills

Pay Transparency Disclosure

Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location. 

Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law.

At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an equal opportunity workplace - we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status, or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.

We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to accommodations-ext@figma.com. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities. 

Examples of accommodations include but are not limited to: 

• Holding interviews in an accessible location
• Enabling closed captioning on video conferencing
• Ensuring all written communication be compatible with screen readers
• Changing the mode or format of interviews 

To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding.

By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with Figma's Candidate Privacy Notice.

Application limits: To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles:

• Candidates may submit up to 5 applications during any rolling 30-day period.
• Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection.

Once the applicable days has passed, candidates are welcome to apply again.