Security Scientist

The shape of it

In the posting’s own words

As a Security Scientist, you will leverage your data analysis skills and help identify and drive impactful projects to improve the safety and security of Figma's product, platform, and our IT systems. The mission of the Figma Security team is to help Figmates ship the most secure and safe product to our users. We are looking for security scientists with a strong grasp of security and anti-abuse fundamentals. You will partner closely with teams in Security Engineering as well as teams across the company to focus on systemic security and safety improvements and risk reduction. You will also apply your security expertise and analytical skills to support and participate in security design reviews and consulting, incident response, and risk management.

What it asks for · 5

• Strong understanding of real-world security, anti-abuse, and detection and response challenges
• Fluency in SQL, with proficiency in Python, R, or a similar scripting language
• Experience working with distributed data processing systems and frameworks such as Hive, Redshift, Presto, Snowflake, or Spark
• Strong knowledge of statistical methods and experimental design
• Excellent judgment and creative problem-solving skills

Also a plus

• A self-starting mindset along with strong communication and collaboration skills

What the job covers

• Collaborate cross-functionally across the company to understand existing security and anti-abuse problems and work with engineering, product, data science, and other teams on solutions
• Understand attacker and user behavior on the Figma platform and inside Figma through creation of new datasets, metrics, experimentation, etc., and guide strategy and decision making
• Build detections, tune signal quality, and measure coverage across Figma's products, platforms, and internal systems, turning attacker behavior into durable, data-driven detections
• Lead and support security investigations, developing the datasets, tooling, and analysis that help us scope incidents, understand root cause, and reduce time to detect and respond
• Translate threat intelligence into action, operationalizing intel on relevant threat actors and techniques to prioritize detection coverage, harden high-risk surfaces, and guide security strategy
• Conduct investigations and design reviews to identify current and new attack vectors against Figma products and services
• Advocate for security and secure practices throughout Figma

Tools and skills named

Words the posting leans on

• security14×
• design6×
• product6×
• skills5×
• detection4×
• platform4×
• anti-abuse3×
• data3×
• excited3×
• systems3×
• understand3×
• analysis2×
• attacker2×
• behavior2×
• collaboration2×
• coverage2×

Counted from the posting after the mission statement and the legal notices are set aside. The ones near the top are the ones a screener is looking for.

More open at Figma

• Account Executive, EnterpriseSan Francisco, CA • New York, NY • United States
• Account Executive, Enterprise (Bengaluru, India)Bengaluru, India
• Account Executive, Enterprise (Berlin, Germany)Berlin, Germany
• Account Executive, Enterprise, Mandarin Speaking (Singapore)Singapore
• Account Executive, Enterprise (Paris, France)Paris, France
• Account Executive, Enterprise (Sydney or Melbourne, Australia)Sydney, Australia • Melbourne, Australia