Security Engineer - Surface Coverage, Detection Engineering

Summary:

Meta's security team is the central engine driving data and system security. We work across all parts of the company, from corporate infrastructure to production to external services, interfacing with nearly every team in the ~~~ are looking for a Security Engineer with experience influencing, mentoring, and contributing alongside teams of engineers who focus on threat modeling, TTP identification, and detection engineering securing Meta's surfaces. You'll work alongside Software Engineers, Offensive Security Engineers, Product Managers, and Data Scientists/Engineers to identify critical assets, assess the top risks, and evaluate potential attacks against Meta systems. You will be working with engineering teams supporting Meta's products (including WhatsApp, Instagram, Horizon Worlds, Threads, and others) serving over 3.2 billion daily active user working to understand existing detection coverage, enumerating gaps, and presenting findings to product, security, and legal senior leaders to drive decisions around multi-year risk mitigation efforts.

Required Skills:

Security Engineer - Surface Coverage, Detection Engineering Responsibilities:

1. Influence and align the organization's vision and strategy, while engaging our teams to develop and deliver specific, multi-year roadmaps, programs, and projects

2. Collaborate with various functions, drive engineering initiatives and have an impact at an organizational level

3. Lead technical design and strategy leveraging insights from some of the most advanced infrastructure in the world

4. Partner with leadership to influence and drive org design, contribution and prioritization

5. Coach, mentor, support, and care for the team in a way that enables long-term career development, happiness, and success at scale

6. Leverage state-of-the-art graph-based TTP to asset mapping systems to enumerate transitive detection coverage and develop novel approaches to prioritize and scale Product-specific infrastructure coverage

7. Build, cultivate, and maintain positive relationships with cross-functional partners to enable the team's ability to effectively and efficiently execute on project work

8. Assist with hiring, growing, and building a high performing team capable of achieving the team's mission

9. Work across partners in Product Management, Data Science, and Data Engineering to design and iterate on metrics and goals related to attack enumeration and detection coverage and validation

Minimum Qualifications:

Minimum Qualifications

1. 12+ years of work experience in software or security engineering

2. BS in Computer Science or equivalent experience in Security

3. Demonstrated experience in working across organizational boundaries to achieve company-wide impact

4. Experience leading and managing complex cross-functional programs

5. Knowledge of Windows, MacOS, and Linux operating systems, container orchestration, hypervisors, and distributed system security

6. Experience with an interpreted programming language (PHP, Python, Perl, Ruby, etc.)

7. Experience with attacker tactics, techniques and procedures

Preferred Qualifications:

Preferred Qualifications

1. Demonstrated experience in one or more Security domains such as Detection Engineering, Product Security, Cloud Security - Web Application Security experience across the Software Development Lifecycle is a plus

2. Experience working with Legal and Governance, Risk, and Compliance teams to understand and address complex and emerging regulatory requirements

3. Background in security-focused software engineering, designing large scale systems and data pipelines, or in offensive security

4. Demonstrated experience launching, scaling, and obtaining buy-in from Product VP stakeholders on a complex multi-year security initiative

5. Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigates suspicious behavior across networks and systems

Public Compensation:

$213,000/year to $293,000/year + bonus + equity + benefits

Industry: Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at ~~~.