• Security Engineer, Enterprise Engineering

    Meta (New York, NY)


    Summary:

    Meta's Enterprise Application Security team is seeking a security engineer with proven experience identifying weaknesses and crafting creative solutions to eliminate those weaknesses at scale. We don't just identify and help fix security vulnerabilities - we go beyond by preventing security problems before they exist. You will be expected to collaborate technically with developers and engineers across large organizations. You will be relied upon to provide application and infrastructure teams with security expertise necessary to build the secure enterprise that underpins Meta.

    Required Skills:

    Security Engineer, Enterprise Engineering Responsibilities:

    1. Conceive, design, develop and improve industry-leading security tooling, automation and/or frameworks that enable enterprise teams at scale to deliver applications and services with appropriate security controls to meet evolving requirements for security and privacy

    2. Identify and eliminate classes of security problems by shifting detection and prevention left into the development workflow

    3. Provide just-in-time, actionable, technical security guidance to enterprise application and service teams through code reviews, penetration tests, adversarial testing, threat modeling, architecture design reviews, and other security activities

    4. Identify and prioritize areas of improvement for security maturity across the enterprise

    5. Ensure prioritization, resourcing, and timely delivery of work within a changing business environment

    6. Collaborate with cross-functional teams to ensure security work is being prioritized and addressed

    Minimum Qualifications:

    Minimum Qualifications:

    7. B.S. or M.S. in Computer Science, Engineering, or related technical discipline, or 5+ years of equivalent experience

    8. 5+ years of work experience developing production-level code in Python, PHP, Java, Ruby, Go, Rust, C/C++, or similar language

    9. 5+ years of work experience identifying and mitigating security issues in software (Python, PHP, Java, Ruby, Go, Rust, C/C++ or similar language) and knowledge of best practice secure code development

    Preferred Qualifications:

    Preferred Qualifications:

    10. Experience fixing enterprise security problems across broad corporate boundaries using influence and relationships

    11. Experience in penetration testing or red team operations

    12. Experience automating application security controls in large-scale enterprise environments

    13. Experience developing software that enables or evaluates security controls in complex systems

    14. Experience building and securing enterprise-scale software, services, and infrastructure

    15. Broad knowledge of the security domain, which may include security investigations, incident management, digital forensics, offensive security, vulnerability management, application security, and other security disciplines

    16. Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)

    17. Experience in designing, analyzing and conducting threat model assessments of enterprise software and services

    18. Experience owning a particular component, feature or system

    19. Proven communication skills and high attention to detail

    Public Compensation:

    $147,000/year to $208,000/year + bonus + equity + benefits

    **Industry:** Internet

    Equal Opportunity:

    Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

     

    Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [email protected].