
Application Security Engineer, Privacy
Required skills
- privacy threats
- privacy vulnerabilities
- security incidents
- Python
- PHP
- Java
- C/C++
- AI agents
- agent pipelines
- incident triage
Nice to have
- AI tools
- workflow optimization
- measurable impact
- public research
- blogging
- presentations
Role summary
Meta's Privacy Engineering team is looking for a Privacy Engineer to identify, scope, contain, and eradicate privacy threats to products and infrastructure. This role involves designing and guiding Software Engineers through vulnerability remediations, learning from security/privacy incidents, and identifying vulnerabilities at scale. The engineer will build AI agents and pipelines to discover, prevent, and remediate issues, protecting the privacy of billions. Key responsibilities include incident triage, fact identification, mitigation, remediation, and root cause analysis, ensuring lessons learned prevent recurrence. The role requires 5+ years of experience in technical privacy or security engineering, including incident response, application privacy/security, and/or offensive security, along with 5+ years of coding experience in Python, PHP, Java, C/C++.
Responsibilities
- Incident triage and fact identification: Get the right people involved to understand what has happened and assess impact
- Follow the facts uncovered in triage to mitigate and remediate the vulnerability
- Review and understand what happened and ensure that the root cause and contributing factors are identified, documented, and remediated
- Apply technical understanding to ensure Meta learns from each incident to ensure it doesn't resurface
- Build AI agents and agent pipelines to help discover, prevent, and remediate vulnerabilities and privacy issues across all Meta products
Minimum Qualifications
- B.S. or M.S. in Computer Science or a related field, or equivalent work experience
- 5+ years work experience in technical privacy or security engineering domains, including incident response, application privacy/security, and/or offensive security
- 5+ years work experience coding in Python, PHP, Java, C/C++ (or equivalent language) including code maintenance and review
- Experience identifying, analyzing, and remediating real-world privacy/security threats
Preferred Qualifications
- 7+ years work experience in technical privacy or security engineering domains, including incident response, application privacy/security, and/or offensive security
- Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Technical contributions to the privacy or security community (e.g., public research, blogging, presentations)
- Experience within a corporate environment communicating technical issues and their implications to other areas of the business
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
- Technical experience across other Privacy or Security disciplines, such as Application Security or Privacy
$154,000/year to $217,000/year + bonus + equity + benefits
Similar roles
Data Center Strategy & Planning ManagerMeta · Bellevue, CA · Onsite
Product Communications Manager, WhatsAppMeta · Washington, DC · Onsite- Senior Application Security EngineerPennylane · Remote · Remote
- Application Security EngineerStrive Health · United States · Onsite
- Sr. Application Security EngineerHims & Hers · Remote · Remote
Application Security Engineer, LeadBooz Allen Hamilton · Colorado Springs, CO · Hybrid
