Security Engineer (Senior / Staff)
Meta
Meta's Central Security team finds weaknesses before attackers do and builds solutions to eliminate them, protecting billions of people. The role provides AI security and native-code security guidance, conducts security assessments (specializing in mobile platform and application code), and leads internal security/privacy initiatives.
What you’ll do
- Provide AI security and native-code security guidance to engineering and product teams.
- Lead internal security/privacy initiatives.
- Assess and respond to internet threats and conduct security assessments specializing in mobile platform and application code.
- Build solutions to eliminate discovered vulnerabilities.
What they’re looking for
- B.S./M.S. in CS or equivalent experience
- 6+ years (IC5) / 8+ years (IC6) in security engineering (vuln research, pentesting, or assessments of production systems)
- 4+ years reviewing C/C++ with secure coding practices
- Programming in Python/C++ or similar
- Security architecture and least-privilege experience on internet-facing products
- Nice to have: iOS/Android security model, VM escapes, exploitation/reverse engineering/CTF, static analysis and fuzzing, Rust/Obj-C/Java/Kotlin, community contributions, experience using AI tools to improve security workflows
Skills
- C/C++: C, C++, reviewing C/C++, secure coding practices, native-code security
- Python: Python, programming in Python
- Mobile security: iOS security model, Android security model, mobile platform, mobile application code
- Reverse engineering / exploitation: exploitation, reverse engineering, CTF, VM escapes
- Static analysis & fuzzing: static analysis, fuzzing
- Rust: Rust
- Objective-C: Obj-C, Objective-C
- Java / Kotlin: Java, Kotlin
- AI tools: AI, using AI tools to improve security workflows, AI security
The post
Meta | Security Engineer (Senior / Staff) | ONSITE Bellevue, Menlo Park, New York, Washington DC — Staff role also REMOTE (US) | Full-time
Meta's Central Security team is hiring Security Engineers at two levels (same team, same work):
- Senior (IC5): https://www.metacareers.com/profile/job_details/1407457964247914/?env=prod - Staff (IC6): https://www.metacareers.com/profile/job_details/5486943914865119/?env=prod
We find weaknesses before attackers do, then build the solutions that eliminate them. You'll be the expert engineering and product teams turn to for AI security and native-code security guidance, providing security guidance on a constant stream of new products, leading internal security/privacy initiatives, assessing and responding to internet threats, and conducting security assessments specializing in mobile platform and application code. The work protects 3B+ people. Looking for: B.S./M.S. in CS or equivalent experience; 6+ years (IC5) / 8+ years (IC6) in security engineering (vuln research, pentesting, or assessments of production systems); 4+ years reviewing C/C++ with secure coding practices; programming in Python/C++ or similar; security architecture and least-privilege experience on internet-facing products. Nice to have: iOS/Android security model, VM escapes, exploitation / reverse engineering / CTF, static analysis and fuzzing, Rust / Obj-C / Java/Kotlin, community contributions (research, talks, bug bounty), and experience using AI tools to improve security workflows.