Adversarial Privacy Engineer (Red Team)

Meta; Salt Lake City (UT); Sur place; USD 184 000 - 257 000; Plein temps

Résumé du poste

Meta is seeking a Privacy Engineer to join its Privacy Red Team, a dedicated function that proactively identifies and exposes privacy risks across Meta's apps and services. You will conduct adversarial privacy assessments, simulate real-world privacy attack scenarios, and drive improvements to how privacy-protective systems are designed and built.

This role operates at the intersection of offensive security thinking and privacy engineering, partnering with product, legal, policy, and engineering

Qualifications

• 8+ years of experience in privacy engineering, security engineering, or a related field with a focus on adversarial testing, vulnerability research, or privacy risk assessment.
• Experience designing and executing privacy or security red team assessments, including threat modeling, attack simulation, and control validation across large-scale consumer products.
• Experience identifying and exploiting privacy vulnerabilities such as re-identification risks, data minimization failures, unauthorized data access patterns, or consent and purpose limitation bypass.
• Experience communicating technical privacy risk findings in written form to both engineering teams and non-technical leadership stakeholders.
• Experience driving cross-functional remediation efforts and influencing engineering and product decisions through privacy risk analysis.

Responsabilités

• Design and execute adversarial privacy assessments across Meta's products and infrastructure, simulating real-world threat scenarios to identify data exposure, unauthorized access, and privacy control failures.
• Develop and maintain a red team methodology and testing framework specific to privacy risks, including data minimization failures, consent bypass, re-identification attacks, and cross-context data leakage.
• Identify systemic privacy vulnerabilities across multiple product surfaces and drive remediation through cross-functional partnerships with engineering, product, legal, and policy teams.
• Define and improve privacy red team processes, tooling, and workflows that enable scalable, repeatable adversarial testing across Meta's evolving product portfolio.
• Translate complex privacy attack findings into actionable risk assessments and communicate them clearly to both technical engineering teams and non-technical leadership audiences.
• Partner with privacy engineering, security, and compliance teams to align red team findings with regulatory obligations and internal privacy standards.
• Drive the long-term strategy and roadmap for privacy red team operations, identifying emerging threat vectors and influencing organizational priorities accordingly.
• Mentor other engineers on adversarial privacy testing techniques, fostering a culture of proactive privacy risk identification across the broader engineering organization.
• Lead coordinated responses to large-scale privacy risk escalations, managing cross-functional mitigation efforts and tracking resolution across multiple teams.
• Identify gaps in existing privacy controls, detection capabilities, and engineering processes, and drive technical solutions to close those gaps at scale.

Connaissances

Adversarial testing

Privacy risk assessment

Threat modeling

Cross-functional collaboration

Communicating risk to leadership

Description du poste

Meta is seeking a Privacy Engineer to join its Privacy Red Team, a dedicated function that proactively identifies and exposes privacy risks across Meta's apps and services. You will conduct adversarial privacy assessments, simulate real-world privacy attack scenarios, and drive improvements to how privacy-protective systems are designed and built.

This role operates at the intersection of offensive security thinking and privacy engineering, partnering with product, legal, policy, and engineering