Meta Security is seeking a skilled Security Engineer to bolster our threat detection and response capabilities. You will work closely with software engineers and offensive security specialists to identify critical assets, assess major risks, and evaluate potential attacks against Meta systems. Your responsibilities will include:
* Leading cross-functional projects to enhance our ability to effectively detect and respond to security incidents.
* Reviewing the security architecture of large-scale custom and commercial systems and independently proposing logging, detection, and prevention controls.
* Performing TTP-based threat modeling for a diverse range of assets, including endpoints, mobile devices, servers, internal services, public and private cloud environments, and networking equipment.
* Analyzing logs from various sources (e.g., individual host logs, network traffic logs) to identify potential threats and detection ideas.
* Building response workflows and actions that automatically resolve false positives and provide context, scaling our ability to investigate security incidents.
* Supporting security incident response in a cross-functional environment and driving incident resolution.
* Designing and implementing attack testing automation to validate detection coverage.
* Building logging pipelines using our custom datasets and infrastructure.
Good To Have:- Experience in security-focused software engineering, designing large scale systems and data pipelines, or offensive security
- Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigates suspicious behavior across networks and systems
- Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Offensive Security Testing, Detection and/or Response tooling development
Must Have:- 6+ years of experience in Detection & Response Engineering or similar Security Engineering role
- Experience building complex automations and integrations using SOAR platforms
- Bachelor's degree or equivalent experience in Security
- Experience designing systems used for responding to both external and insider threats
- Experience analyzing network and host-based security events
- Knowledge of networking technologies, specifically TCP/IP and the related protocols
- Knowledge of operating systems, file systems, and memory structures on Windows, MacOS and Linux
- Coding/scripting experience in one or more general purpose languages
- Experience with attacker tactics, techniques, and procedures