Security Engineer

Meta; Trenton (NJ); On-site; USD 154,000 - 217,000; Full time

Job summary

Meta's Security Engineering team is seeking a security engineer to identify vulnerabilities, drive mitigations, and build scalable protections across Meta's infrastructure and product ecosystem. You will partner with engineering and product teams to embed security into the development lifecycle.

You will mentor peers, lead large security projects, and translate findings into actionable guidance, helping raise the security bar at scale while coordinating on-call duties and incident response.

Qualifications

• Experience performing vulnerability research and security assessments on production systems.
• Ability to identify vulnerability classes across web, mobile, or infrastructure environments.
• Experience developing security tooling and automation.
• Experience threat modeling and security design reviews for large-scale distributed systems.
• Proven ability to drive cross-functional mitigations and communicate risk.

Responsibilities

• Conduct in-depth security assessments and threat modeling across Meta's products.
• Identify gaps in designs and drive cross-functional mitigations to resolution.
• Develop and improve security tooling, automation, and frameworks for scalable coverage.
• Translate complex findings into actionable guidance for engineering partners.
• Lead large-security projects from discovery through remediation.
• Represent security in cross-functional roadmap discussions.
• Handle security incident response and on-call duties independently.
• Mentor engineers on secure coding practices and review methodologies.
• Convert point-in-time fixes into reusable systemic improvements.
• Proactively communicate project status, risks, and blockers to leadership.

Skills

Vulnerability research

Penetration testing

Threat modeling

Security tooling & automation

Secure coding practices

Cross-functional collaboration

Tools

Static analysis tools

Dynamic analysis tools

Automation frameworks

Job description

Summary:

Meta's Security Engineering team is looking for a security engineer to help protect the billions of people who use Meta's products and services. In this role, you will identify security vulnerabilities, drive mitigations across complex systems, and build scalable solutions that raise the security bar across Meta's infrastructure and product ecosystem. You will partner closely with engineering and product teams to embed security into the development lifecycle, turning one-off findings into systemic improvements that reduce risk at scale.

Required Skills:

Security Engineer Responsibilities:

1. Conduct in-depth security assessments, threat modeling, and vulnerability research across Meta's products, services, and infrastructure


2. Identify security gaps in system designs and implementations, and drive cross-functional mitigations to resolution


3. Develop and improve security tooling, automation, and frameworks — including static and dynamic analysis — to enable scalable security coverage across engineering teams


4. Translate complex security findings into actionable guidance for engineering and product partners, influencing design and implementation decisions


5. Lead large-complexity security projects with ambiguous requirements, defining the approach and driving outcomes from discovery through remediation


6. Serve as a domain expert for the team, representing security positions in cross-functional collaborations and roadmap discussions


7. Handle security incident response and on-call duties independently, coordinating with cross-functional partners to resolve issues


8. Mentor other engineers on secure coding practices, vulnerability classes, and security review methodologies


9. Identify opportunities to convert point-in-time security fixes into reusable, systemic improvements that benefit multiple teams and product areas


10. Proactively communicate project status, risks, and blockers to leadership and cross-functional stakeholders

Minimum Qualifications:

Minimum Qualifications:

1. 6+ years of experience in security engineering, including vulnerability research, penetration testing, or security assessments of production systems


2. Experience identifying and exploiting common vulnerability classes (e.g., injection, authentication flaws, insecure deserialization, privilege escalation) across web, mobile, or infrastructure environments


3. Experience developing security tooling or automation in one or more general-purpose programming or scripting languages


4. Experience conducting threat modeling and security design reviews for large-scale distributed systems


5. Experience driving security mitigations across cross-functional engineering teams, including communicating risk and influencing technical decisions through written proposals and stakeholder alignment

Preferred Qualifications:

Preferred Qualifications:

1. Experience with security assessment of mobile platforms (iOS or Android) or cloud infrastructure environments


2. Experience building static or dynamic analysis tools that scale security review processes across large engineering organizations


3. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies


4. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies


5. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)


6. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)


7. Demonstrated contributions to the security community through public research, vulnerability disclosures, bug bounty programs, or conference presentations


8. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)


9. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)


10. Familiarity with exploit mitigation techniques and experience evaluating their effectiveness in production environments

Public Compensation:

$154,000/year to $217,000/year + bonus + equity + benefits

Industry:

Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].