Meta Verified
Social Media, Technology, Virtual Reality, Advertising
Security Engineer
Bellevue, DCHybridFull Time$154,000–$217,000 /yrPosted 1 month agoVisa sponsorship available
Required skills
- security engineering
- vulnerability research
- penetration testing
- security assessments
- production systems
- vulnerability classes
- injection
- authentication flaws
- insecure deserialization
- privilege escalation
Nice to have
- mobile platforms
- iOS
- Android
- cloud infrastructure
- AI skill development
- prompt engineering
Role summary
Meta's Security Engineering team is seeking a security engineer to protect its users by identifying vulnerabilities, driving mitigations, and building scalable solutions across its products and infrastructure. The role involves conducting security assessments, threat modeling, and vulnerability research, as well as developing security tooling and automation. You will collaborate with engineering and product teams to embed security into the development lifecycle, translate findings into actionable guidance, and lead complex security projects. Responsibilities also include handling security incident response, mentoring engineers on secure practices, and converting point-in-time fixes into systemic improvements. The position requires 6+ years of experience in security engineering, including vulnerability research, penetration testing, and experience with common vulnerability classes, security tooling development, threat modeling, and cross-functional collaboration.
Meta's Security Engineering team is looking for a security engineer to help protect the billions of people who use Meta's products and services. In this role, you will identify security vulnerabilities, drive mitigations across complex systems, and build scalable solutions that raise the security bar across Meta's infrastructure and product ecosystem. You will partner closely with engineering and product teams to embed security into the development lifecycle, turning one-off findings into systemic improvements that reduce risk at scale.
Responsibilities
Minimum Qualifications
Preferred Qualifications
$154,000/year to $217,000/year + bonus + equity + benefits
Responsibilities
- Conduct in-depth security assessments, threat modeling, and vulnerability research across Meta's products, services, and infrastructure
- Identify security gaps in system designs and implementations, and drive cross-functional mitigations to resolution
- Develop and improve security tooling, automation, and frameworks — including static and dynamic analysis — to enable scalable security coverage across engineering teams
- Translate complex security findings into actionable guidance for engineering and product partners, influencing design and implementation decisions
- Lead large-complexity security projects with ambiguous requirements, defining the approach and driving outcomes from discovery through remediation
- Serve as a domain expert for the team, representing security positions in cross-functional collaborations and roadmap discussions
- Handle security incident response and on-call duties independently, coordinating with cross-functional partners to resolve issues
- Mentor other engineers on secure coding practices, vulnerability classes, and security review methodologies
- Identify opportunities to convert point-in-time security fixes into reusable, systemic improvements that benefit multiple teams and product areas
- Proactively communicate project status, risks, and blockers to leadership and cross-functional stakeholders
Minimum Qualifications
- 6+ years of experience in security engineering, including vulnerability research, penetration testing, or security assessments of production systems
- Experience identifying and exploiting common vulnerability classes (e.g., injection, authentication flaws, insecure deserialization, privilege escalation) across web, mobile, or infrastructure environments
- Experience developing security tooling or automation in one or more general-purpose programming or scripting languages
- Experience conducting threat modeling and security design reviews for large-scale distributed systems
- Experience driving security mitigations across cross-functional engineering teams, including communicating risk and influencing technical decisions through written proposals and stakeholder alignment
Preferred Qualifications
- Experience with security assessment of mobile platforms (iOS or Android) or cloud infrastructure environments
- Experience building static or dynamic analysis tools that scale security review processes across large engineering organizations
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
- Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Demonstrated contributions to the security community through public research, vulnerability disclosures, bug bounty programs, or conference presentations
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Familiarity with exploit mitigation techniques and experience evaluating their effectiveness in production environments
$154,000/year to $217,000/year + bonus + equity + benefits
Similar roles
- Research Scientist Intern, Monetization Ranking & AI Foundations (PhD)Meta · Sunnyvale, CA · Onsite
- Software Engineer, Machine Learning - Central IntegrityMeta · Bellevue, CA · Onsite
IT Security EngineerCoolSys - Refrigeration and HVAC Systems · Unavailable · Onsite- Sr. Security EngineerOctus · United States · Hybrid
- Information Systems Security Engineer (6905)MetroStar · Reston, VA · Onsite
- Network and Security Engineer, DefenseApplied Intuition · Sunnyvale, CA · Onsite
