Infrastructure Security Monitoring Engineer

Meta's Infrastructure Security Monitoring (ISM) team is seeking an experienced engineer to help secure the infrastructure that connects over a billion users. You will be responsible for building, implementing and operationally supporting detections throughout our infrastructure.

We are looking for a candidate with deep interest in and experience with security and innovation, who will research and develop new solutions to help protect our infrastructure and our users. This candidate should have experience identifying scalable detection opportunities, codifying their ideas and be motivated to defend infrastructure against threat actors.

With focus areas including large-scale DDoS detection, security tool development, and defense against internal and external attacks you will have opportunities to develop expertise across these areas while contributing to the security of Meta's infrastructure.

Responsibilities

• Iterate security posture to better protect against attacks and detect new vectors
• Lead efforts to mitigate and investigate security incidents
• Utilize frameworks to develop and scale detection, mitigation and response automation tooling
• Evaluate and test new vendor and home-grown initiatives for security issues
• Mentor and evangelize security practices through cross functional work with engineering teams throughout Meta
• Keep Meta safe through active operation and defense of critical infrastructure

Qualifications

• Currently has, or is in the process of obtaining a Bachelor's degree in Computer Science, Computer Engineering, relevant technical field, or equivalent practical experience. Degree must be completed prior to joining Meta
• 5+ years of development experience in at least one programming language (Python, Go, etc.) with the ability to apply that to security tool development, automation, and overall programmatic solutions that will be used to defend infrastructure
• 3+ years of experience in offensive/defensive security or systems engineering
• Knowledge of network protocols (TCP/IP, computer networking, routing and switching) and Unix based systems
• Experience researching, building, and implementing defensive security systems that are used against internal and external attack vectors
• Experience designing and building out application, system and network security monitoring to aid in detection or forensic investigations Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Experience mentoring and promoting industry security practices
• Experience developing baselines and investigating anomalies in order to identify suspicious behavior
• Experience developing automation and utilizing frameworks to scale detection, mitigation or response tools
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Understanding of MITRE ATT&CK Framework and associated threat actor techniques
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Experience threat hunting, i.e. using threat intel to proactively and iteratively investigate potential risks and finding suspicious behavior
• Background in intrusion detection, security investigations, and incident response