Security Engineer, Investigations and Response

Facebook wordmarkFacebook wordmarkFacebook
Security Engineer, Investigations and Response
Facebook wordmarkFacebook wordmarkFacebook
Location pin icon
Facebook's security team is the central engine driving data and systems security at the company, supporting Facebook and all of its family of apps. The org is responsible for inhibiting malicious actors from compromising our environment, detecting and responding to them before they do damage if they do, ensuring we are maintaining the protections we say we will, and engaging with the community to help those outside the company learn from the work we do. We work across all parts of the company, from the corporate infrastructure to production to external services, interfacing with nearly every team in the company.

Facebook's security team is looking for a Security Engineer with a variety of experiences in the discovery, containment, and mitigation of threat actors to work in the Internal Detection and Response team. We are building the next generation of security operations and response platforms to support the scale and security of Facebook. You will be analyzing different sources of information leveraged for detection, responding and investigating incidents and working with our software and production engineering teams to develop scalable systems to automate detection and remediation.
Security Engineer, Investigations and Response Responsibilities
  • Support and lead security incident response in a cross-functional collaboration environment driving towards incident resolution
  • Develop IR initiatives that improve our capabilities to respond and remediate security events faster
  • Perform forensic analysis of digital information
  • gathers and handles evidence
  • Perform analysis of logs from a variety of sources (e.g., individual host logs, network traffic logs) to identify and investigate potential threats
  • Build automation for identification, response, and remediation of malicious activity
  • Drive implementation of countermeasures, mitigations, and containment
Minimum Qualifications
  • Bachelor's degree or equivalent experience in Security
  • Experience analyzing network and host-based security events
  • Knowledge of networking technologies, specifically TCP/IP and the related protocols
  • Knowledge of operating systems, file systems, and memory on Windows, MacOS, or Linux
  • Experience with an interpreted programming language (PHP, Python, Perl, Ruby, etc.)
  • Experience with attacker tactics, techniques and procedures
Preferred Qualifications
  • Background in malware analysis, intrusion detection, and/or threat intelligence
  • Experience “threat hunting”, i.e. using threat intel to proactively and iteratively investigates these potential risks and finding suspicious behavior in the network
  • Experience in host and memory forensics (including live response) for Windows, OSX, and/or Linux
  • Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as: Logs and events processing, Incident Management, Detection and/or response tool development
Locations
About Meta
Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.
Meta is committed to providing reasonable support (called accommodations) in our recruiting processes for candidates with disabilities, long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support. If you need support, please reach out to accommodations-ext@fb.com.
(Colorado only*) Estimated salary of $213,000/year + bonus + equity + benefits
*Note: Disclosure as required by sb19-085(8-5-20)
Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. You may view our Equal Employment Opportunity notice here. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. We may use your information to maintain the safety and security of Meta, its employees, and others as required or permitted by law. You may view Meta's Pay Transparency Policy, Equal Employment Opportunity is the Law notice, and Notice to Applicants for Employment and Employees by clicking on their corresponding links. Additionally, Meta participates in the E-Verify program in certain locations, as required by law.

Meta is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, you may contact us at accommodations-ext@fb.com.