About us

As a fast-growing tech company, we’re looking for builders and innovators — people who thrive in the face of uncertainty and are motivated to make an impact. We are also looking for true teammates — people who are genuine, humble, and driven to level up together. If you're excited to shape the future, contribute to an energetic company culture, and work at the cutting edge of blockchain technology, we want you to join our team and help us lead the charge!

About the opportunity

As a senior member of the Figment Security Team, you'll plan and run full-scope adversary emulation across all of Figment's products and platforms, from conventional cloud and application infrastructure to build pipelines and crypto systems. You'll own engagements end-to-end: evaluating environments to find vulnerabilities, building the attack scenarios to prove them out, and seeing your findings drive real fixes.

This role is as much about partnership as it is about offense. You'll work directly with stakeholders and the blue team to communicate findings clearly, recommend practical mitigations, and help strengthen our overall security posture.

How you will make an impact

Plan and execute red team engagements, pentests, and ad-hoc assessments against cloud, development pipelines, web and application layers, source code, and more
Apply attacker tactics, techniques, and procedures safely within Figment environments, including detection-evasion work
Produce clear reports and presentations tailored to both technical and executive audiences
Partner with stakeholders, including technical staff, leadership, and legal counsel, to translate findings into risk-appropriate, actionable recommendations
Collaborate with the blue team to suggest mitigations, validate fixes, and improve defensive coverage
Mentor blue team members and lead cross-team exercises such as purple teaming
Support incident response with offensive security technical expertise and contribute to post-incident action plans
Build and improve red team tooling, scripts, infrastructure, methodologies, and documentation

What you bring to the team

Experience with and strong understanding of cloud platforms, CI/CD pipelines, and supply chains
Demonstrated use of AI tools to accelerate offensive work (LLM-assisted code review, payload generation, recon, report drafting), with sound judgment about where they help versus where manual testing is required
Offensive expertise in container orchestration: attacking and escaping Docker and Kubernetes (container breakout, RBAC abuse, misconfiguration exploitation)
Experience performing API and web application assessments
Experience performing source code review for security flaws
Experience building automations that chain red team tooling together, cutting manual effort across recon, exploitation, and reporting
Strong written and verbal communication conveying findings, risk, and remediation to engineers, stakeholders, and executives

Bonus if you have

Industry certifications such as OSCP/OSCE, OSEP, OSWE, GPEN, GCPN, GWAPT, or GXPN
Solid understanding and experience working with GitHub and GitHub Actions
Programming skills as well as the ability to read and assess applications written in multiple languages such as Go, Rust, and Ruby
Understanding of security risks for blockchain and crypto

Why you might be excited about us

At Figment, we offer an exciting range of competitive benefits designed to support and empower every member of our team:

100% remote-first environment with offices in Toronto, New York, London, and Singapore
4 weeks of PTO that kick in day one, plus 1 week of flex days
Extended company-paid health benefits that start day one
Best-in-class parental leave and flexible arrangements
Home office stipend and monthly Wi-Fi reimbursement
Yearly Learning & Development budget
401K (US) or RRSP match (Canada)
Stock options in the company
Annual on-site company gatherings and retreats

Other reasons you may love working at Figment:

A team of under 200 members, allowing impactful contribution from day one
Strong focus on personal career development and role shaping
Culture of honesty, professionalism, and risk-taking in a high-growth environment
eNPS score of 54 (‘great’) and ranked as one of the top Web3 employers by Talent Titans

Compensation

One of Figment’s core principles is “Making the Invisible Visible” — ensuring transparency in pay and benefits.

US base salary range: $165,000–$180,000 USD
Canada base salary range: $165,000–$180,000 CAD
For candidates in other countries, ranges will be disclosed during the first interview.

Final pay is determined by skills, education, training, and experience.

Interview process

First recruiter call: learn more about Figment, the role, and the process
Be prepared to discuss your interest in Figment and the position
Timely feedback throughout the process, including constructive feedback if not moving forward
Typical timeline: 2–4 weeks from initial screen to offer

Senior Red Team Operator