Security Engineer, Identity and Access Management (IAM)

Meta; City Of London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading technology company is seeking a Security Engineer to enhance the security of their Identity & Access Management Systems. You will design and implement systems, build tools, and communicate security findings to stakeholders. Ideal candidates should have at least 2 years of experience in scripting with Python/C++ and a relevant degree. This position involves cross-functional collaboration in a dynamic environment.

Qualifications

• 2+ years of experience in developing custom scripts in Python/C++ and PHP/Hack.
• 3+ years of software development experience.
• Experience in assessing security deficiencies.
• Knowledge of systems architectural designs and data-flow diagrams.
• Experience with security reporting and recommendations.

Responsibilities

• Design and implement systems for Identity & Access Management.
• Build and maintain tools to improve security posture.
• Conduct design and code reviews.
• Articulate security findings to stakeholders.
• Recommend process improvements related to security.

Skills

Python

C++

PHP

Hack

Analytical skills

Problem-solving

Communication skills

Education

MS or PhD in Computer Science or related field

Tools

Data pipeline

Machine Learning (AI)

Job description

Summary

Meta's security team is the central engine driving data and systems security at the company, supporting Meta and all of its family of apps. The org is responsible for inhibiting malicious actors from compromising our environment, detecting and responding to them before they do damage if they do, ensuring we are maintaining the protections we say we will, and engaging with the community to help those outside the company learn from the work we do. We work across all parts of the company, from the corporate infrastructure to production to external services, interfacing with nearly every team in the company. The Security Engineer should have prior experience with security policy, risk, and access management disciplines and be experienced in collaborating with cross-functional teams. This position will be responsible for identifying and enforcing solutions to control access to internal systems, cover broad aspects of information security, and identify deficiencies in the access management space. This role specifically needs conceptual understanding of the IAM concepts that can be applied to our internal IAM solutions. Some travel may be required.

Responsibilities

1. Design and implement systems that enhance the security of Meta’s Identity & Access Management Systems

2. Build and maintain tools that improve the Identity and Access Management posture at Meta

3. Conduct design and code reviews. Analyze and improve efficiency, scalability, and stability for assigned product area and/or systems

4. Identify and drive changes as needed for assigned codebase, product area and/or systems

5. Interface with other teams to incorporate their innovations and vice versa

6. Articulate security findings to internal to a variety of stakeholders, including both technical and non-technical stakeholders

7. Provide defensible recommendations on technical, physical and administrative control implementations based on findings while balancing the cost versus benefits

8. Participate in the development and oversight of corrective actions relating to security issues

9. Participate in cross-functional, team, and status review meetings

10. Recommend process improvement and strategic initiatives as related to security

Minimum Qualifications

1. 2+ years of experience in developing custom scripts in Python/C++ and PHP/Hack

2. MS or PhD (or equivalent) in Computer Science or related field

3. 3+ years of experience in software development experience

4. Experience building large-scale distributed systems or similar experience

5. Experience in assessing security deficiencies in first-party/internal information systems and recommending mitigating controls

6. Knowledge of evaluating systems architectural designs, data-flow diagrams and technical security implementations, particularly in context of access management in different geographical locations

7. Experience with developing security reporting and recommendations that are meaningful, defensible and actionable for a variety of audiences

8. Experienced in managing competing priorities and simultaneous projects in a fast paced environment with little supervision

9. Demonstrated experience in communication skills - both writing and speaking, interpersonal skills, and experienced in working cross-functionally with various teams

Preferred Qualifications

1. Practical experience of analytical and problem-solving skills, including a basic understanding of data analysis techniques

2. Data pipeline

3. Machine Learning (AI)

Industry: Internet