Security Engineer (Builder) - Meta

The Meta security organization is seeking an experienced Security Engineer who loves to build their way out of security problems. We strive to go beyond just identifying security vulnerabilities and flaws. We want to ‘treat security as an engineering problem,’ solving problems through clever, scalable, automated solutions. We want to knock down whole swaths of vulnerabilities at once and eliminate classes of problems so that they never recur in the future. If you love security but also love spending tons of time coding, this might be the ideal role for you!

RESPONSIBILITIES

Security Engineer (Builder) Responsibilities:

• Work with teams of security engineers and developers to architect scalable solutions to complex problems
• Build out proofs of concept, tools, and/or platforms to address security problems at scale
• Lead other engineers in creating solutions
• Eliminate classes of security problems by shifting the detection and preventions left into the developer workflow
• Partner with cross-functional teams to ensure security maturity work is being prioritized and addressed in ways both timely and durable
• Provide architectural, design, and threat-based guidance to software development teams to improve security maturity before code is created

MINIMUM QUALIFICATIONS

Minimum Qualifications:

• BS or MS in Computer Science or a related field, or equivalent experience
• 5+ years work experience securing enterprise-scale software and services
• 5+ years work experience writing code in Python, PHP, Java, Ruby, Go, Rust, C/C++ (or similar languages)
• Experience addressing security problems via building scaled engineering solutions
• Experience in reviewing distributed systems design and conducting threat model assessment of software and services

PREFERRED QUALIFICATIONS

Preferred Qualifications:

• Background in security-focused software engineering, security engineering, and/or building internal-facing security products
• Broad knowledge of security domains
• Contributions to the security community (eg, OSS contributions, public research, blogging, presentations, bug bounty, etc.)