Security Engineer, Incident Response

Meta; Menlo Park (CA); On-site; USD 180,000 - 280,000; Full time

Job summary

Meta is seeking an Incident Response Engineer to lead investigations, coordinate cross-functional incident response, and drive scalable, automated solutions across the Security Operations landscape.

You will shape multi-year roadmaps, mentor teams, and collaborate with software and production engineering to enhance detection, response, and remediation capabilities in a large, regulated environment.

Qualifications

• Bachelor's or Master's in Computer Science or related field or equivalent experience.
• 8+ years in Security Incident Response and Detection in a large, regulated organization.
• In-depth knowledge of Security Operations and Incident Response services.
• Experience reporting on incident/program status for leadership.
• Experience leading and managing complex cross-functional programs.
• Experience responding to external and insider threats.
• Experience analyzing network and host-based security events.
• Knowledge of TCP/IP and related protocols.
• Experience with Windows, macOS and Linux file systems and memory structures.
• Coding/scripting experience in one or more general purpose languages.
• Experience with malware analysis, digital forensics, intrusion detection, and/or threat intelligence.
• Experience adhering to responsible AI practices and staying current with emerging AI technologies.
• Experience integrating AI tools to optimize workflows.
• Experience in threat hunting leveraging intelligence data.
• Experience recruiting, building, and leading technical teams.
• Broad knowledge across the Security domain (Logs, Incident Management, Digital Forensics, Detection)

Responsibilities

• Conduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution.
• Develop Incident Response initiatives that improve our functionalities to effectively respond and remediate security incidents.
• Refine operational metrics, KPIs, and SLIs to measure Security Operations and Incident Response services.
• Influence and align the team’s mission and strategy; prioritize and deliver multi-year roadmaps and projects.
• Build and maintain relationships with internal customers to identify and facilitate solutions.
• Partner with cross-functional teams to solve detection and response challenges.
• Collaborate with software and production engineering teams to develop scalable IR solutions.
• Focus on prioritizing and automating detection and response functionalities.
• Coach and mentor the team for long-term career development and success at scale.

Skills

Incident response

Threat hunting

Cross-functional leadership

AI in security

Networking TCP/IP

Scripting

Malware analysis

Digital forensics

Team leadership

Threat intelligence

Education

Bachelor's or Master's in CS or related field

Job description

About

Meta Security is looking for an Incident Response Engineer with experience coordinating, investigating and responding to internal and external threats. You will help the team establish, lead and execute multi-year roadmaps to mature investigative and response services, drawing upon automation and cross functional partnerships to create scalable solutions and maintain high standards of operational competence.

Responsibilities

• Conduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution
• Develop Incident Response initiatives that improve our functionalities to effectively respond and remediate security incidents
• Refine operational metrics, key performance indicators, and service level objectives to measure Security Operations and Incident Response services
• Influence and align the team’s mission and strategy. Collaboratively prioritize and deliver specific multi-year roadmaps and projects
• Build, cultivate, and maintain successful relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work
• Partner with cross-functional teams to solve challenges related to a broad spectrum of detection and response initiatives
• Collaborate with software and production engineering teams to develop scalable and adaptable Incident Response and Investigative solutions
• Focus on identifying areas of greatest impact for prioritizing, automating and scaling every aspect of our detection and response functionalities
• Coach, mentor, support and care for the team in a way that enables long-term career development, happiness and success at scale

Minimum Qualifications

• Bachelor of Science or Master of Science in Computer Science or related field, or equivalent experience
• 8+ years of work experience in Security Incident Response and Detection and Response Engineering in a large, regulated organization
• In-depth subject-matter knowledge in technical and process regarding Security Operations and Incident Response services
• Experience developing and delivering information on incident and program status for leadership
• Experience leading and managing complex cross-functional programs
• Experience responding to both external and insider threats
• Experience analyzing network and host-based security events
• Knowledge of networking technologies, specifically Transmission Control Protocol (TCP)/Internet Protocol (IP) and the related protocols
• Knowledge of operating systems, file systems, and memory structures on Windows, macOS and Linux
• Coding/scripting experience in one or more general purpose languages
• Experience with attacker tactics, techniques, and procedures Background in malware analysis, digital forensics, intrusion detection, and/or threat intelligence
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigate suspicious behavior across networks and systems
• Experience recruiting, building, and leading technical teams, including performance management
• Broad knowledge across the Security domain, as well as demonstrated experience in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development