Security Engineer - IR Threat Intelligence

Meta; New York (NY); On-site; USD 147,000 - 208,000; Full time

Job summary

Join a forward-thinking company as a Security Engineer specializing in IR Threat Intelligence. In this pivotal role, you'll investigate and respond to cyber threats, enhance security measures, and collaborate with cross-functional teams to fortify the organization's defenses. Your expertise in threat actor tracking and intelligence research will be crucial in identifying vulnerabilities and developing effective countermeasures. This dynamic position offers a chance to make a significant impact on the security landscape while working with cutting-edge tools and technologies. If you are passionate about cybersecurity and thrive in a collaborative environment, this opportunity is perfect for you.

Benefits

Bonus

Equity

Comprehensive benefits

Qualifications

• 7+ years of experience in threat actor tracking or intelligence research.
• Experience with scripting languages like Python or PHP.

Responsibilities

• Track threat clusters and implement countermeasures on corporate network.
• Work closely with incident responders to provide actionable intelligence.

Skills

Threat actor tracking

Intelligence research

Critical thinking

Communication skills

Scripting (Python, PHP)

Project management

Education

B.S. or M.S. in Computer Science

Equivalent experience

Tools

YARA

Snort

SQL

Job description

Security Engineer - IR Threat Intelligence

Meta Security is looking for a Security Engineer - IR Threat Intelligence with extensive experience in investigating cyber threats with an intelligence-driven approach. You will be proactively responding to a diverse set of security threats, as well as tracking actor groups with an interest or capability to target Meta and its employees. You will also be identifying the gaps in current detections and preventions by long-term intelligence tracking and research, and working with cross-functional stakeholders to improve Meta’s security posture. You will be developing and improving the tooling and systems used by the team.

Responsibilities

1. Track threat clusters posing threats to Meta’s infrastructure and employees, and identify, develop and implement countermeasures on our corporate network.
2. Investigate, mitigate, and forecast emerging technical trends and communicate effectively with actionable suggestions to different types of audiences.
3. Work closely with incident responders to provide useful and timely intelligence to enrich ongoing investigations.
4. Improve the tooling of threat cluster tracking and intelligence data integration to existing systems.
5. Engage constructively in cross-functional projects to improve the security posture of Meta’s infrastructure, such as red team operations, surface detection coverage expansion and vulnerability management discussions.

Minimum Qualifications

1. B.S. or M.S. in Computer Science or related field, or equivalent experience.
2. 7+ years experience in a threat actor tracking or intelligence research role.
3. Experience to work with a team spanning multiple locations/time zones.
4. Familiarity with campaign tracking techniques and experience to convert the tracking results to long term countermeasures.
5. Proven track record of managing and executing on short term and long term projects.
6. Experience intelligence-led hunting to spot suspicious activities in the network and identify potential risks.
7. Experience to prioritize and execute tasks with minimal direction or oversight.
8. Experience to think critically and qualify assessments with solid communications skills.
9. Coding or scripting experience in one or more scripting languages such as Python or PHP.

Preferred Qualifications

1. Experience close collaborating with incident responders on incident investigations.
2. Familiarity with malware analysis or network traffic analysis.
3. Familiarity with nation-state, sophisticated criminal, or supply chain threats.
4. Experience with production of file-based or network-based rules and signatures for detection and tracking of complex threats, such as YARA or Snort.
5. Experience in one or more query languages such as SQL.
6. Experience developing production code for threat intelligence tooling.
7. Experience working across the broader security community.

Compensation: $147,000/year to $208,000/year + bonus + equity + benefits

Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.