Enterprise App Security Engineer (Builder)

Meta; New York (NY); On-site; USD 122,000 - 181,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Meta’s Enterprise Application Security team seeks a security engineer to identify weaknesses and craft scalable fixes that protect enterprise applications at scale. You will collaborate with developers and engineers across large orgs to provide security guidance and build safeguards that prevent vulnerabilities.

You will design and implement security controls for third-party AI adoption, and you will help protect sensitive data across Meta’s first-party and third-party applications, with a focus

Qualifications

• 2+ years building production-grade code in Python, PHP, Java, Ruby, Go, Rust, C/C++ or similar language.
• 2+ years identifying and mitigating security issues in software (Python, PHP, Java, Ruby, Go, Rust, C/C++ or similar language).
• Experience owning a component, feature or system.
• Experience building and securing enterprise-scale software, services, and infrastructure.

Responsibilities

• Design, develop and improve security tooling, automation and frameworks at scale.
• Shift detection and prevention left into dev workflow.
• Provide just-in-time, actionable security guidance via reviews, tests, threat modeling and architecture reviews.
• Collaborate with cross-functional teams to prioritize security work.
• Build security controls for safe third-party AI adoption and agentic workflows.

Skills

Python

Java

Go

C/C++

PHP

Ruby

Security

Threat modeling

Education

B.S./M.S. in CS or related field

Job description

Meta’s Enterprise Application Security team seeks a security engineer to identify weaknesses and craft scalable fixes that protect enterprise applications at scale. You will collaborate with developers and engineers across large orgs to provide security guidance and build safeguards that prevent vulnerabilities.

You will design and implement security controls for third-party AI adoption, and you will help protect sensitive data across Meta’s first-party and third-party applications, with a focus