Manager, Security Operations

About the role

Figma is seeking a dedicated Manager for Security Operations to spearhead and enhance the organization's security operations framework. In this pivotal role, you will be responsible for designing and expanding the systems, processes, and tools that safeguard both Figma and its user base. Collaborating closely with teams across Security Engineering, Platform Security, IT, Governance, Risk, Compliance (GRC), and Legal, you will enhance detection and response capabilities while influencing the evolution of the Detection and Response Team (DART) and Security Operations Center (SOC).

Key facts

What you'll do

• Oversee the entire security monitoring and incident response program, managing everything from detection engineering to post-incident evaluations and continuous enhancements.
• Develop and automate workflows for security operations that encompass alert triage, enrichment, investigation, and response, utilizing SOAR platforms and bespoke tools.
• Draft and update incident response documentation, including run books, escalation protocols, and communication strategies for incidents of varying severity.
• Facilitate incident preparedness initiatives, which may include tabletop exercises, red team simulations, and assessments of response capabilities.
• Optimize SIEM and SOAR platforms to minimize false positives, enhance signal quality, and bridge gaps in detection coverage.
• Establish threat intelligence capabilities to recognize adversarial behaviors, prioritize investments, and guide detection and response strategies.
• Collaborate with Legal, Privacy, and Communications teams during significant incidents to ensure compliance with breach notification and regulatory requirements.
• Shape the security operations strategy through effective vendor management, operational metrics, and collaborative efforts across Identity and Access Management (IAM), vulnerability management, Data Loss Prevention (DLP), and exposure reduction initiatives.

Requirements

• A minimum of 7 years of experience in security operations, incident response, or a comparable security engineering position.
• Proven hands-on experience in creating and automating detection and response workflows using scripting, APIs, or security automation platforms.
• In-depth understanding of SIEM and SOAR technologies, particularly in cloud-native or Software as a Service (SaaS) environments.
• A history of successfully building, scaling, or significantly enhancing a detection and response program.
• Experience in managing complex security incidents and collaborating with Legal, Privacy, and business stakeholders during critical events.

Nice to have

• Experience working in a public company environment with compliance requirements such as SOX, ISO 27001, SOC 2, or FedRAMP.
• Knowledge of AI risk management frameworks, including NIST AI RMF, OECD AI Principles, or ISO 42001.
• Familiarity with AI-driven tools that automate security operations workflows and improve team productivity.

Skills & tools

• Proficiency in SIEM platforms
• Expertise in SOAR platforms
• Skills in scripting and API integrations
• Knowledge of detection engineering principles
• Familiarity with threat intelligence tools
• Experience with IAM, DLP, and vulnerability management systems

Practical notes

• Compensation for this role will be based on qualifications, experience, potential contributions, and work location.
• The compensation package includes equity options, along with comprehensive health, dental, and vision insurance.
• Retirement benefits are provided, featuring company contributions.
• Support for parental leave and reproductive or family planning is available.
• Mental health and wellness benefits, along with paid time off, sick leave, and holidays, are part of the package.
• Additional perks include company recharge days, reimbursements for cell phone and home internet, and lifestyle spending accounts.
• An annual bonus plan is available for eligible non-sales positions.
• Reasonable accommodations can be arranged; please reach out to accommodations-ext@figma.com for assistance.
• Candidates are required to keep their cameras on during video interviews.
• In-person onboarding is mandatory for new hires.

About the company

Figma is a collaborative design platform used by teams to create, prototype, and ship products. Founded by Dylan Field and Evan Wallace in 2012, Figma pioneered browser-based design tools. Adobe attempted to acquire Figma for $20 billion in 2022 but the deal was terminated in December 2023 due to regulatory concerns.