Security Detection Engineer, Insider Trust

Summary:

As part of Meta Security, our Insider Trust team is focused on identifying and responding to insider threats to data. The team's mission is to identify malicious use of otherwise legitimate access to data from people inside the company and respond to it before damage is done. We investigate across a broad spectrum of abuse including abuse of user data, intellectual property, and leaks of sensitive information. We collaborate with software engineering teams to build advanced detection capabilities and understand how abuse happens so that we can stay ahead of those who are interested in misusing their access. The Insider Trust team is looking for a highly motivated Security Engineer to build and improve internal tools and systems to detect malicious activities related to insider threats. Candidates are expected to analyze and monitor internal tools, hunt for insider threats against company data and infrastructure, and have the ability to carry out complex internal investigations from collection to reporting. As part of the role, this person will work side by side with our engineering teams to build advanced detection solutions to help keep systems and information safe, and partner closely with our Human Resources and Legal teams to carry out complex investigations.

Required Skills:

Security Detection Engineer, Insider Trust Responsibilities:

1. Lead cross-functional projects to improve our GenAI capabilities to effectively detect and respond to internal threats and security incidents

2. Leverage threat modeling and analysis to build event and/or behavioral based detections to protect our critical GenAI assets and infrastructure

3. Perform analysis of logs from a variety of sources (e.g., individual host logs, network traffic logs) to identify potential insider threats

4. Build operational workflows and actions that auto-resolve false positives and provide context scaling our ability to investigate

5. Identify gaps in our infrastructure, and work with software engineers, product managers, and business partners to gain visibility through logging and detection

Minimum Qualifications:

Minimum Qualifications

1. Bachelor's degree in Computer Science, Engineering, or equivalent experience

2. 5+ years of experience in Detection & Response Engineering or similar Security Engineering role

3. Experience developing detections using event or anomaly based methods

4. Experience interpreting information from multiple sources and working with data sets

5. Experience with database tools/systems such as SQL, HQL

6. Coding proficiency in Python

Preferred Qualifications:

Preferred Qualifications

1. M.S. or PhD in Computer Science or related field, or equivalent experience

2. Experience conducting technical security investigations (response, forensics, log analysis)

3. Experience with anomaly detection applicable to the insider threat detection space

4. Experience in system, network, and/or application security

5. Coding proficiency in OOP languages, e.g. PHP, C++, etc.

6. Coding proficiency in Pandas, NumPy, Scikit-learn, TensorFlow

Public Compensation:

$147,000/year to $208,000/year + bonus + equity + benefits

Industry: Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at ~~~.