Detection & Response Security Engineer, Threat Intelligence

Meta; Greater London; On-site; GBP 60,000 - 95,000; Full time

Job summary

Meta is seeking a threat intelligence investigator with extensive experience in intelligence-driven cyber threat analysis. You will proactively respond to a broad set of threats, track actor groups targeting Meta, and identify gaps in detections and prevention through long-term intelligence research.

You will work with cross-functional teams across locations/time zones, prioritizing tasks with minimal oversight and applying strong analytical and communication skills.

Qualifications

• 3+ years threat intelligence experience.
• Bachelor's degree in Computer Science, Information Security, or relevant field (or equivalent experience).
• Familiarity with campaign tracking techniques and ability to convert results to long-term countermeasures.
• Familiarity with threat modeling frameworks like Diamond Model and MITRE ATT&CK.
• Experience intelligence-driven hunting to spot suspicious activities.
• Proven track record managing short- and long-term projects.
• Ability to work across locations/time zones with minimal oversight.
• Coding or scripting in Python or PHP.
• Familiarity with malware/network traffic analysis.
• Experience authoring production code for threat intelligence tooling.
• Experience conducting large-scale data analysis.
• Experience in SQL.
• AI skills development and ethical AI practices.

Responsibilities

• Proactively responding to a broad set of security threats.
• Track actor groups targeting Meta and its employees.
• Identify gaps in detections and prevention through intelligence research.
• Collaborate with cross-functional stakeholders to improve security posture.
• Produce rules and signatures for detection and tracking of complex threats (YARA/Snort).
• Integrate AI tools to optimize workflows and drive impact.
• Collaborate with incident responders on investigations.

Skills

Threat intelligence

Campaign tracking

MITRE ATT&CK

Diamond Model

Data analysis

Python scripting

PHP scripting

AI tools integration

Threat hunting

Incident response

Education

Bachelor's degree in CS/InfoSec or related

Tools

SQL

YARA

Snort

Threat intel tooling

Job description

Meta Security is looking for a threat intelligence investigator with extensive experience in investigating cyber threats with an intelligence-driven approach. You will be proactively responding to a broad set of security threats, as well as tracking actor groups with an interest or capability to target Meta and its employees. You will also be identifying the gaps in current detections and preventions by long-term intelligence tracking and research, and working with cross-functional stakeholders to improve Meta’s security posture.

• 3+ years threat intelligence experience
• Bachelor's degree in Computer Science, Information Security, or relevant field (or equivalent experience)
• Familiarity with campaign tracking techniques and ability to convert the tracking results to long term countermeasures
• Familiarity with threat modeling framework, such as Diamond Model and/or MITRE ATT&CK framework
• Experience intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
• Proven track record of managing and executing on short term and long term projects
• Ability to work with a team spanning multiple locations/time zones
• Ability to prioritize and execute tasks with minimal direction or oversight
• Ability to think critically and qualify assessments with solid communications skills
• Coding or scripting experience in one or more scripting languages such as Python or PHP
• Familiarity with malware analysis or network traffic analysis
• Experience authoring production code for threat intelligence tooling
• Experience conducting large scale data analysis
• Experience in one or more query languages such as SQL
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience working across the broader security community
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Production of file-based or network-based rules and signatures for detection and tracking of complex threats, such as YARA or Snort
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Experience closely collaborating with incident responders on incident investigations
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Familiarity with nation-state, sophisticated criminal, or supply chain threats