I've found several Security Engineer positions in the US that match your criteria. These roles focus on cloud security, require over 5 years of experience, offer competitive salaries, and include remote work options. Would you like to see the details?

Sure. Here's the analysis:

Job Analysis:

The Security Engineer role at Figma is centered on enhancing the security landscape of the company’s products, platforms, and IT systems. Fundamentally, this position is hired to ensure that Figma continues to provide a secure experience for its users by identifying vulnerabilities and implementing robust solutions. A key responsibility is performing security assessments and conducting code audits, which requires an intricate understanding of security protocols and coding standards. This indicates that the role is not merely technical but also involves strategic thinking, as it necessitates identifying risk and advocating for security best practices across teams. The successful candidate will likely deal with evolving security challenges and must navigate collaboration across different functions, necessitating well-honed communication skills. Success in this role means not only improving security but also fostering a culture of security awareness among all Figmates, effectively aligning the technical responsibilities with the broader mission of making design accessible and secure for all. Overall, the emphasis on both technical proficiency and interpersonal communication hints at a complex environment where cross-team collaboration and problem-solving are essential.

Company Analysis:

Figma occupies a vibrant space in the design collaboration market, positioned as an innovative leader in creating accessible design tools. The company is on a mission driven by the belief that great products emerge through collaboration, which aligns with the Security Engineer role. As Figma continues to grow and disrupt traditional design paradigms, the potential for scope and influence within this role increases significantly. The culture at Figma appears to be fast-paced and innovation-driven, with strong values around growth and inclusivity—emphasizing that every employee should thrive while learning. This creates an exciting yet challenging environment for the Security Engineer, who must adapt swiftly to changes while promoting security awareness. Organizationally, the role seems critical as it not only supports operational security efforts but also contributes to Figma's larger vision of ensuring a secure user experience. The emphasis on collaboration within the security team suggests this position may offer substantial visibility and access to leadership, reinforcing the intersection of security and design as crucial to Figma’s operational ethos.

Absolutely. Here are some mock interview questions that could come up:

• Tell me about a time when you had to advocate for security practices within a team. What approach did you take and what was the outcome?
• Describe a challenging security assessment you conducted. What technical skills did you employ to tackle the issues you faced?
• Can you provide an example of a situation where you had to make prioritization decisions regarding security controls? How did you weigh the risks and benefits?
• What experiences do you have with running penetration tests or managing a bug bounty program?
• How do you stay updated on new security vulnerabilities and proposed mitigations in web application security?
• Imagine you are tasked with conducting a security review for a new feature before its launch. What steps would you take to ensure its security?
• We’ve identified a new attack vector that could potentially impact our products. How would you approach analyzing this risk and communicating your findings?
• How would you approach improving collaboration between the Security team and product teams to foster a culture of security awareness at Figma?
• Why are you interested in working at Figma specifically, and how do you see your values aligning with our mission?
• What excites you most about the opportunity to work in a company that is both product-focused and security-driven?
• What strategies would you employ to enhance the security awareness of non-technical teams at Figma?
• If you could ask one question to help you gauge the culture at Figma, what would it be?