Enterprise Application Security Engineer (Builder)

Meta; New York (NY); On-site; USD 122,000 - 181,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Meta’s Enterprise Application Security team seeks a security engineer to identify weaknesses and craft scalable fixes that protect enterprise applications at scale. You will collaborate with developers and engineers across large orgs to provide security guidance and build safeguards that prevent vulnerabilities.

You will design and implement security controls for third-party AI adoption, and you will help protect sensitive data across Meta’s first-party and third-party applications, with a focus

Qualifications

• 2+ years building production-grade code in Python, PHP, Java, Ruby, Go, Rust, C/C++ or similar language.
• 2+ years identifying and mitigating security issues in software (Python, PHP, Java, Ruby, Go, Rust, C/C++ or similar language).
• Experience owning a component, feature or system.
• Experience building and securing enterprise-scale software, services, and infrastructure.

Responsibilities

• Design, develop and improve security tooling, automation and frameworks at scale.
• Shift detection and prevention left into dev workflow.
• Provide just-in-time, actionable security guidance via reviews, tests, threat modeling and architecture reviews.
• Collaborate with cross-functional teams to prioritize security work.
• Build security controls for safe third-party AI adoption and agentic workflows.

Skills

Python

Java

Go

C/C++

PHP

Ruby

Security

Threat modeling

Education

B.S./M.S. in CS or related field

Job description

Meta's Enterprise Application Security team is seeking a security engineer with proven experience identifying weaknesses and crafting creative solutions to eliminate those weaknesses at scale. We secure and harden the enterprise applications Meta runs on, both first-party and third-party, and we protect the sensitive data they hold. We don't just identify and help fix security vulnerabilities, we go beyond by preventing security problems before they exist.Our scope includes securing how Meta adopts third-party AI applications and agentic workflows across the enterprise, a high-priority area with significant visibility across the company. You will be expected to collaborate technically with developers and engineers across large organizations, and you will be relied upon to provide application and infrastructure teams with the security expertise necessary to build the secure enterprise that underpins Meta.Enterprise Application Security Engineer (Builder) Responsibilities:Conceive, design, develop and improve effective security tooling, automation and/or frameworks that enable enterprise teams at scale to deliver applications and services with appropriate security controls to meet evolving requirements for security, privacy, and data protectionIdentify and eliminate classes of security problems by shifting detection and prevention left into the development workflowProvide just-in-time, actionable, technical security guidance to enterprise application and service teams through code reviews, penetration tests, adversarial testing, threat modeling, architecture design reviews, and other security activitiesCollaborate with cross-functional teams to ensure security work is being prioritized and addressedDesign and build security controls and guardrails that allow the safe adoption of third-party AI applications and agentic workflows across the enterprise, including controls governing what automated systems can access and what data they can reachProtect sensitive and highly confidential data held in enterprise applications by building enforcement mechanisms that operate continuously and at scaleMinimum Qualifications:B.S. or M.S in Computer Science, Engineering, or related technical discipline, or equivalent experience2+ years of work experience developing production-level code in Python, PHP, Java, Ruby, Go, Rust, C/C++, or similar language2+ years of work experience identifying and mitigating security issues in software (Python, PHP, Java, Ruby, Go, Rust, C/C++ or similar language) and knowledge of best practice secure code developmentExperience owning a particular component, feature or systemExperience building and securing enterprise-scale software, services, and infrastructureExperience communicating technical security findings and recommendations in writing to technical and non-technical stakeholdersPreferred Qualifications:Experience developing software that enables or evaluates security controls in complex systemsDemonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologiesExperience fixing enterprise security problems across broad corporate boundaries using influence and relationshipsExperience in designing, analyzing and conducting threat model assessments of enterprise software and servicesExperience in penetration testing or red team operationsContributions to the security community (public research, blogging, presentations, bug bounty, etc.)Experience automating application security controls in large-scale enterprise environmentsExperience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)Broad knowledge of the security domain, which may include security investigations, incident management, digital forensics, offensive security, vulnerability management, application security, and other security disciplinesAbout Meta:Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].$122,000/year to $181,000/year + bonus + equity + benefitsIndividual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.