Security Engineer

Meta; Greater London; Hybrid; GBP 90,000 - 125,000; Full time

Benefits offered by this job

Comprehensive benefits

Learning & development stipend

Job summary

Meta's Security Engineering team is seeking a Security Engineer to help protect billions of users and Meta's global infrastructure from evolving threats. You will conduct security assessments, vulnerability research, and threat modeling across Meta's products and systems—spanning mobile apps, web platforms, backend services, and internal infrastructure.

You will identify systemic gaps, drive mitigations at scale, and partner with engineering teams to embed security best practices into the

Qualifications

• 6+ years of security engineering experience in web/mobile/backend security.
• Experience performing threat modeling and architecture reviews for large-scale systems.
• Ability to drive cross-functional remediation and scalable improvements.
• Experience developing or improving security tooling and automation.
• Strong written communication of risk to technical and non-technical audiences.
• Experience with on-call security responsibilities.

Responsibilities

• Conduct security assessments, penetration testing, and vulnerability research across Meta's web, mobile, and backend systems to identify and remediate security risks
• Lead threat modeling and security architecture reviews for new and existing products and infrastructure
• Identify systemic security gaps and drive cross-functional mitigations that scale beyond individual findings
• Develop and improve security tooling, automation, and detection capabilities to enhance the team's ability to identify and respond to threats
• Collaborate with product and infrastructure engineering teams to define security requirements and integrate security controls into the software development lifecycle
• Lead complex security investigations and incident response efforts, coordinating with cross-functional partners to resolve issues and prevent recurrence
• Translate security findings into actionable, prioritized recommendations for engineering and leadership audiences through clear written documentation
• Mentor other engineers on security best practices, contribute to team culture, and support recruiting and onboarding efforts
• Manage oncall security responsibilities independently, triaging and resolving security issues with cross-functional support as needed
• Identify and land new security initiatives on the team roadmap that address high-complexity, ambiguous risk areas aligned with broader team strategy

Skills

Penetration testing

Threat modeling

Security assessments

Incident response

On-call experience

Mentoring engineers

Tools

Python

C/C++

Java

Job description

Meta's Security Engineering team is seeking a Security Engineer to help protect billions of users and Meta's global infrastructure from evolving threats. In this role, you will conduct security assessments, vulnerability research, and threat modeling across Meta's products and systems — spanning mobile applications, web platforms, backend services, and internal infrastructure. You will identify systemic security gaps, drive mitigations at scale, and partner with engineering teams to embed security best practices into the software development lifecycle. Your work will directly reduce risk for Meta and its users by turning one-off security findings into durable, scalable defenses.

Security Engineer Responsibilities:

• Conduct security assessments, penetration testing, and vulnerability research across Meta's web, mobile, and backend systems to identify and remediate security risks


• Perform threat modeling and security architecture reviews for new and existing products and infrastructure


• Identify systemic security gaps and drive cross-functional mitigations that scale beyond individual findings


• Develop and improve security tooling, automation, and detection capabilities to enhance the team's ability to identify and respond to threats


• Collaborate with product and infrastructure engineering teams to define security requirements and integrate security controls into the software development lifecycle


• Lead complex security investigations and incident response efforts, coordinating with cross-functional partners to resolve issues and prevent recurrence


• Translate security findings into actionable, prioritized recommendations for engineering and leadership audiences through clear written documentation


• Mentor other engineers on security best practices, contribute to team culture, and support recruiting and onboarding efforts


• Manage oncall security responsibilities independently, triaging and resolving security issues with cross-functional support as needed


• Identify and land new security initiatives on the team roadmap that address high-complexity, ambiguous risk areas aligned with broader team strategy

Minimum Qualifications:

• 6+ years of experience in security engineering, including hands-on work in penetration testing, vulnerability research, or security assessments of web, mobile, or backend systems


• Experience performing threat modeling and security architecture reviews for large-scale software systems


• Experience identifying systemic security risks and driving cross-functional remediation efforts that result in scalable, durable improvements


• Experience developing or improving security tooling, automation, or detection capabilities to support team-level security operations


• Experience communicating security findings and risk assessments in writing to both technical and non-technical stakeholders

Preferred Qualifications:

• Experience with security automation, static or dynamic analysis tooling, or building internal security platforms


• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)


• Familiarity with security considerations specific to large-scale distributed systems, mobile platforms (iOS or Android), or cloud infrastructure


• Experience with offensive security techniques including exploit development, binary analysis, or red team operations


• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies


• Proficiency in one or more programming or scripting languages (e.g., Python, C/C++, Java) used to develop security tools or analyze vulnerabilities


• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)

About Meta:

Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.

Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.