Security Engineer - IR Threat Intelligence

Facebook; Nashville (TN); On-site; USD 147,000 - 208,000; Full time

Job summary

An established industry player is seeking a Security Engineer specializing in IR Threat Intelligence. In this pivotal role, you will proactively respond to cyber threats, investigate actor groups targeting the organization, and enhance the security posture through intelligence-driven strategies. You'll collaborate with cross-functional teams to improve tooling and systems, ensuring effective tracking and mitigation of potential risks. If you are passionate about cybersecurity and thrive in a dynamic environment, this opportunity offers a chance to make a significant impact in protecting critical infrastructure.

Benefits

Bonus

Equity

Comprehensive Benefits

Flexible Work Hours

Remote Work Options

Qualifications

• 7+ years in threat tracking or intelligence research roles.
• Experience with cross-functional teams across multiple time zones.
• Proven track record in managing short and long-term projects.

Responsibilities

• Track threat clusters and implement countermeasures on corporate networks.
• Investigate and forecast emerging technical trends with actionable suggestions.
• Engage in projects to improve security posture and incident response.

Skills

Threat Actor Tracking

Intelligence Research

Incident Response Collaboration

Critical Thinking

Communication Skills

Python Scripting

PHP Scripting

Data Analysis

Education

B.S. in Computer Science

M.S. in Computer Science

Tools

YARA

Snort

SQL

Job description

Summary:

Meta Security is looking for a Security Engineer - IR Threat Intelligence with extensive experience in investigating cyber threats with an intelligence-driven approach. You will be proactively responding to a wide range of security threats, as well as tracking actor groups with an interest or capability to target Meta and its employees. You will also be identifying the gaps in current detections and preventions by long-term intelligence tracking and research, and working with cross-functional stakeholders to improve Meta’s security posture. You will be developing and improving the tooling and systems used by the team.

Required Skills:

Security Engineer - IR Threat Intelligence Responsibilities:

1. Track threat clusters posing threats to Meta’s infrastructure and employees, and identify, develop and implement countermeasures on our corporate network.
2. Investigate, mitigate, and forecast emerging technical trends and communicate effectively with actionable suggestions to different types of audiences.
3. Work closely with incident responders to provide useful and timely intelligence to enrich ongoing investigations.
4. Improve the tooling of threat cluster tracking and intelligence data integration to existing systems.
5. Engage constructively in cross-functional projects to improve the security posture of Meta’s infrastructure, such as red team operations, surface detection coverage expansion and vulnerability management discussions.

Minimum Qualifications:

1. B.S. or M.S. in Computer Science or related field, or equivalent experience.
2. 7+ years experience in a threat actor tracking or intelligence research role.
3. Experience to work with a team spanning multiple locations/time zones.
4. Familiarity with campaign tracking techniques and experience to convert the tracking results to long-term countermeasures.
5. Proven track record of managing and executing on short-term and long-term projects.
6. Experience intelligence-led hunting to spot suspicious activities in the network and identify potential risks.
7. Experience to prioritize and execute tasks with minimal direction or oversight.
8. Experience to think critically and qualify assessments with solid communications skills.
9. Coding or scripting experience in one or more scripting languages such as Python or PHP.

Preferred Qualifications:

1. Experience close collaborating with incident responders on incident investigations.
2. Familiarity with malware analysis or network traffic analysis.
3. Familiarity with nation-state, sophisticated criminal, or supply chain threats.
4. Experience with production of file-based or network-based rules and signatures for detection and tracking of complex threats, such as YARA or Snort.
5. Experience in one or more query languages such as SQL.
6. Experience developing production code for threat intelligence tooling.
7. Experience conducting large scale data analysis.
8. Experience working across the broader security community.

Public Compensation:

$147,000/year to $208,000/year + bonus + equity + benefits

Industry: Internet

Equal Opportunity:

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].