Security Engineer, Wearables (RL)

Meta; Redmond; On-site; AUD 312,000 - 428,000; Full time

Job summary

Meta Reality Labs is seeking a Security Engineer to drive the technical direction for securing devices across their full lifecycle, from factory provisioning to end-of-life patching. The RL Trust Security team secures wearables, VR, and next-gen consumer electronics, building cryptographic provisioning, vulnerability management, and manufacturing security operations.

The role partners with cross-functional teams and contract manufacturers to shape cryptographic identity infrastructure, SBOM

Qualifications

• Experience reporting program status to leadership.
• Leadership of complex cross-functional programs.
• Experience with security vulnerabilities, remediation frameworks, threat modelling, threat detection, and incident handling.
• 10+ years addressing security issues in web development and related practices.

Responsibilities

• Influence and align the organization’s vision and strategy across multi-year roadmaps, ensuring prioritization and timely delivery.
• Own the technical strategy for securing wearable device bring-up and cryptographic identities for factory provisioning.
• Architect an AI automation layer for vulnerability management across large codebases and thousands of dependencies.
• Drive SBOM generation and end-to-end vulnerability lifecycle tooling for regulatory compliance (FDA/EU).
• Lead platform-level security improvements across a multi-product device portfolio, including cryptographic identity infrastructure modernization.
• Drive end-to-end security for manufacturing infrastructure with threat modelling, cloud security controls, and monitoring.
• Partner with cross-functional teams and contract manufacturers to align on security trade-offs and risk.
• Build systems securing devices from silicon provisioning through end-of-life patching using Rust, C, C++, Python.

Skills

Program status reporting

Cross-functional leadership

Security vulnerability management

10+ years security experience

Education

Bachelor's or Master's in CS/Engineering or related

Tools

AWS

Job description

Summary:

The Reality Labs Trust Security team secures Meta's Reality Labs devices from factory to user, ensuring threat resilience and regulatory compliance across wearables, VR, and next-gen consumer electronics. We build and scale foundational security capabilities including cryptographic device provisioning, vulnerability management, and manufacturing security operations. The team works across diverse technology stacks (on-device firmware, backend infrastructure, AI automation) and collaborates with cross-functional partners to launch secure products at scale.We are looking for a Security Engineer to join the RL Trust Security team to own and drive the technical direction for securing Meta's devices across their full lifecycle. Your work covers device manufacturing security, cryptographic provisioning, vulnerability management, and regulatory compliance (FDA, EU CRA) for products used by millions.

Required Skills:

Security Engineer, Wearables (RL) Responsibilities:

1. Influence and align the organization’s vision and strategy, while engaging our teams to develop and deliver specific, multi-year roadmaps, programs, and projects. Ensure prioritization, resourcing, and timely delivery of this work within a changing business environment

2. Own the technical strategy for securing wearable device bring-up: provisioning cryptographic identities at factory sites, enabling security features through Meta's Product Development Process (PDP), and ensuring only authorized devices can access Meta services

3. Architect an agentic AI automation layer for vulnerability management that spans detection, triage, and remediation, across a large-scale multi-party codebase and thousands of third-party dependencies.

4. Drive system design for SBOM (Software Bill of Materials) generation and end-to-end vulnerability lifecycle tooling that satisfies regulatory requirements including FDA pre-market cybersecurity guidance for connected devices and EU compliance obligations.

5. Lead platform-level security improvements across a multi-product device portfolio, including cryptographic identity infrastructure modernization and DRM provisioning architecture upgrades

6. Drive end-to-end security for manufacturing infrastructure: conduct threat modelling to prioritise risks, define infrastructure and cloud security controls and hardening standards, and establish detection and monitoring pipelines that provide continuous visibility into adversarial activity across factory locations.

7. Partner with cross functional teams and contract manufacturing partners to drive alignment on security trade-offs and risk acceptance for device provisioning models.

8. The work spans hardware cryptography, AI-native vulnerability remediation, and manufacturing security operations across Rust, C, C++, and Python. You will build systems that secure devices from silicon-level provisioning through end-of-life vulnerability patching.

Minimum Qualifications:

1. Experience developing and delivering information on program status for leadership

2. B.S. or M.S. Computer Science, Engineering, or related technical discipline, or equivalent experience

3. Experience leading and managing complex cross-functional programs

4. Experience with exploiting common security vulnerabilities, remediation frameworks, AWS, Threat Modelling, Threat Detection, Security Incident Handling, Infrastructure Hardening

5. 10+ years experience dealing with security issues web programming languages, development practices, and common bug patterns

Preferred Qualifications:

1. Experience writing software that enables security processes

2. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies

3. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)

4. Experience contributing to the security community (public research, blogging, presentations, etc.)

5. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)

6. Experience with tools and technologies: Rust, C, C++, Python, cryptographic key management and provisioning (HSMs, device identity infrastructure), Code signing, secure boot, and device attestation and SBOM tooling for regulatory compliance

Public Compensation:

$219,000/year to $301,000/year + bonus + equity + benefits

Industry:

Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].