Security Engineer - Security Risk Management

Meta; Washington (District of Columbia); On-site; USD 154,000 - 217,000; Full time

Job summary

Meta in Washington, DC is seeking a Security Engineer to join the Security Risk Management team. You will help design and build scalable risk context, tracking, and reporting that drive better investment decisions through automation and monitoring.

You will work with software, data, and security engineers to scale security capabilities, automate responses, and advance controls and compliance initiatives across the organization.

Qualifications

• Bachelor's degree or equivalent experience in CS or security.
• 5+ years securing enterprise-scale infrastructure software and services.
• 3–5+ years programming in Python, PHP, Ruby, or similar scripting languages.
• Experience remediating infrastructure security gaps across wide boundaries.
• Experience with security control automation or 'compliance as code'.
• Strong communication to influence decisions across teams.

Responsibilities

• Work with software, data, and security engineers to design and own scalable risk context, tracking, and reporting.
• Influence evolution of security capabilities to automate monitoring and maturity.
• Design and build solutions to scale risk management and compliance requests.

Skills

Security engineering

Automation

Risk assessment

Cross-functional collaboration

Python

Education

Bachelor's degree in Computer Science or related

Tools

AI tools

Job description

Summary

The Meta Security team is responsible for improving the security posture of the software and services used throughout our company. Our work spans Facebook, Instagram, WhatsApp, Oculus, and all of the underlying systems and infrastructure that power these products behind the scenes.We are seeking a committed and experienced security engineer to join our Security Risk Management (SRM) team to help design and build solutions to:* Drive better understanding of security risk and enable investment decisions through automation, monitoring, and tracking of Meta’s security tools, systems, and controls* Enable security and software engineers to seamlessly respond to requests to prove effective design and operation of security capabilities* Increase maturity of security capabilities through control improvements and redesign

Required Skills

Security Engineer - Security Risk Management Responsibilities:

1. Work with a team of software, data, and security engineers that design, build, and own software solutions that scale high fidelity security risk contextualization, tracking, and reporting

2. Understand and influence evolution of security capabilities across various domains to scale and automate: a) monitoring the effectiveness, and b) increasing the maturity of those capabilities

3. Design and build solutions to scale managing and responding to risk management & compliance related requests

Minimum Qualifications

Minimum Qualifications:

1. Bachelor's degree in Computer Science, Information Security, or relevant field (or equivalent experience)

2. 5+ years work experience securing enterprise-scale infrastructure software and services

3. 3-5+ years programming experience with at least one of the following languages: Python, PHP, Ruby, or similar scripting languages

4. Experience remediating infrastructure security gaps across broad corporate boundaries using influence and relationships

5. Experience with security control automation/monitoring or “compliance as code” implementations

6. Experience thinking critically and defending solutions with communication skills in a cross-functional setting to influence decision makers across all levels of technical background

Preferred Qualifications

Preferred Qualifications:

1. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)

2. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies

3. Networking and system administration experience of server (Linux, Windows) and client (Windows, macOS, Linux) operating systems

4. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)

5. Experience with common risk & compliance program activities (e.g., controls, risk, policy management)

6. Experience generating automated metrics to measure service and program effectiveness and consistency

7. Experience influencing software engineers to build products meant to scale security solutions

Public Compensation

$154,000/year to $217,000/year + bonus + equity + benefits

Industry

Internet

Equal Opportunity

Meta is proud to be an Equal Employment Opportunity and Affimative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].