security engineer for social technology

Meta; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Meta Platforms Inc. ищет опытного инженера по безопасности для проведения пентестинга, анализа уязвимостей и угрозной архитектуры в веб, мобильной и серверной части.

Ваша работа будет направлена на выявление рисков, разработку автоматизированных инструментов и поддержку процессов SDLC по безопасности. Требуется 6+ лет опыта в области обеспечения безопасности, умение проводить моделирование угроз и взаимодействовать с кросс-функциональными командами.

Qualifications

• 6+ лет опыта в security engineering, вкл. пентест, исследование уязвимостей или аудит веб/мобильных/бэкэнд систем
• Опыт threat modeling и обзоров архитектуры безопасности крупных ПО/инфраструктур
• Опыт разработки инструментов безопасности, автоматизации и детекции

Responsibilities

• Проводить оценку безопасности, пентест и исследования уязвимостей для веб, мобильных и бэкэнд-систем.
• Выполнять threat-моделирование и обзоры архитектуры безопасности для продуктов и инфраструктуры.
• Разрабатывать и улучшать инструменты безопасности, автоматизацию и детекцию.
• Сотрудничать с инженерными командами для внедрения требований безопасности в SDLC.
• Руководить расследованиями инцидентов и передавать рекомендации руководству и инженерам

Skills

Пентестинг

Исследование уязвимостей

Моделирование угроз

Архитектура безопасности

Инструменты безопасности

Автоматизация

Инцидент-реагирование

Безопасный SDLC

Менторство

Коммуникация

Tools

Python

C/C++

Java

Job description

Описание:

Meta builds technologies that help people connect, find communities, and grow businesses. Its apps include Messenger, Instagram, and WhatsApp, and it is developing immersive augmented and virtual reality experiences to advance social technology.

Instagram и Facebook принадлежат компании Meta Platforms Inc., деятельность которой признана экстремистской и запрещена на территории РФ

Задачи:

Conduct security assessments, penetration testing, and vulnerability research across web, mobile, and backend systems to identify and remediate risks Perform threat modeling and security architecture reviews for products and infrastructure Identify systemic security gaps and drive scalable, cross-functional mitigations Develop and improve security tooling, automation, and detection capabilities Collaborate with product and infrastructure engineering teams to define security requirements and integrate security controls into the software development lifecycle Lead complex security investigations and incident response, coordinating with cross-functional partners to resolve issues and prevent recurrence Document security findings as clear, actionable, prioritized recommendations for engineering and leadership audiences Mentor engineers on security best practices, contribute to team culture, and support recruiting and onboarding Independently manage on-call security responsibilities, triaging and resolving issues with cross-functional support as needed Identify and deliver security initiatives for the team roadmap addressing complex, ambiguous risks aligned with broader team strategy

Требования:

Требования: 6+ Years of security engineering experience, including hands-on penetration testing, vulnerability research, or security assessments of web, mobile, or backend systems Experience with threat modeling and security architecture reviews for large-scale software systems Experience identifying systemic security risks and driving cross-functional remediation that delivers scalable, durable improvements Experience developing or improving security tooling, automation, or detection capabilities for team-level security operations Experience communicating security findings and risk assessments in writing to technical and non-technical stakeholders Будет плюсом: security automation, static or dynamic analysis tooling, building internal security platforms, integrating AI tools to optimize or redesign workflows and deliver measurable impact, familiarity with security in large-scale distributed systems, iOS or Android, or cloud infrastructure, offensive security techniques including exploit development, binary analysis, or red team operations, ongoing AI skill development such as prompt/context engineering or agent orchestration, proficiency in programming or scripting languages such as Python, C/C++, or Java for security tools or vulnerability analysis, responsible and ethical AI practices including risk assessment, bias mitigation, and quality and accuracy reviews