Security Engineer — Scalable Threat Modeling & Defense

Meta; Richmond (VA); On-site; USD 154,000 - 217,000; Full time

Job summary

Meta's Security Engineering team is looking for a security engineer to help protect the billions of people who use Meta's products and services. You will identify security vulnerabilities, drive mitigations across complex systems, and build scalable solutions that raise the security bar across Meta's infrastructure and product ecosystem.

You will partner with engineering and product teams to embed security into the development lifecycle, turning findings into systemic improvements that reduce

Qualifications

• 6+ years of experience in security engineering, including vulnerability research, penetration testing, or security assessments of production systems
• Experience identifying and exploiting common vulnerability classes (e.g., injection, authentication flaws, insecure deserialization, privilege escalation) across web, mobile, or infrastructure environments
• Experience developing security tooling or automation in one or more general-purpose programming or scripting languages
• Experience conducting threat modeling and security design reviews for large-scale distributed systems
• Experience driving security mitigations across cross-functional engineering teams, including communicating risk and influencing technical decisions through written proposals and stakeholder alignment

Responsibilities

• Conduct in-depth security assessments, threat modeling, and vulnerability research across Meta's products, services, and infrastructure
• Identify security gaps in system designs and implementations, and drive cross-functional mitigations to resolution
• Develop and improve security tooling, automation, and frameworks — including static and dynamic analysis — to enable scalable security coverage across engineering teams
• Translate complex security findings into actionable guidance for engineering and product partners, influencing design and implementation decisions
• Lead large-complexity security projects with ambiguous requirements, defining the approach and driving outcomes from discovery through remediation
• Serve as a domain expert for the team, representing security positions in cross-functional collaborations and roadmap discussions
• Handle security incident response and on-call duties independently, coordinating with cross-functional partners to resolve issues
• Mentor other engineers on secure coding practices, vulnerability classes, and security review methodologies
• Identify opportunities to convert point-in-time security fixes into reusable, systemic improvements that benefit multiple teams and product areas
• Proactively communicate project status, risks, and blockers to leadership and cross-functional stakeholders

Skills

Threat modeling

Vulnerability research

Security tooling

Mentoring juniors

On-call handling

Tools

Static analysis tools

Dynamic analysis tools

Automation scripting

Job description

Meta's Security Engineering team is looking for a security engineer to help protect the billions of people who use Meta's products and services. You will identify security vulnerabilities, drive mitigations across complex systems, and build scalable solutions that raise the security bar across Meta's infrastructure and product ecosystem.

You will partner with engineering and product teams to embed security into the development lifecycle, turning findings into systemic improvements that reduce