Security Strategist

Meta is seeking a distinguished Security Strategist to set multi-year security direction across the company's most complex and consequential risk domains.

In this role, you will determine which systemic security risks warrant investment and in what order, define the frameworks and roadmaps that guide those decisions, and partner with the CISO and senior leadership to drive execution across engineering, product, and business organizations. Your work will shape how Meta anticipates and reduces risk at global scale, protecting billions of people and their data.

Responsibilities

• Define and own Meta's multi-year security strategy in partnership with the CISO and senior leadership, setting direction that spans multiple security pillars and organizations.
• Identify and prioritize the systemic security risks that most warrant investment, grounding recommendations in threat intelligence, incident learnings, and quantitative risk analysis.
• Evaluate Meta's security capabilities against the evolving threat landscape, identify strategic gaps, and define the roadmaps and sequencing required to close them.
• Lead ambiguous, high-impact security initiatives spanning engineering, product, and infrastructure organizations, from problem framing through measurable risk reduction.
• Translate strategic priorities into executable programs with explicit success metrics, and establish the executive-level reporting that holds the organization accountable to them.
• Serve as a trusted technical and strategic advisor to the CISO and senior leadership, synthesizing complex technical and risk information into clear recommendations for executive and board-level decisions.
• Lead threat modeling and risk assessment for Meta's most complex systems, and set the standard for how threat-informed prioritization is practiced across the organization.
• Shape Meta's security strategy for emerging domains including AI systems, and apply AI-native approaches to expand the scope and speed of security analysis.
• Mentor senior engineers and technical leaders across organizations, contributing to hiring at leadership levels Minimum Qualifications.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, relevant technical field, or equivalent practical experience
• 15+ years of experience setting security strategy and managing security risk in large-scale organizations
• Experience defining multi-year security strategy and roadmaps adopted across multiple organizations, with demonstrated measurable risk reduction
• Experience with system design, threat modeling, and risk assessment across complex, multi-layered infrastructure and product environments
• Experience communicating complex security risk and technical trade-offs in writing to both technical and non-technical audiences, and defending prioritization decisions to executive leadership Experience translating threat intelligence and risk analysis into prioritized investment decisions
• Experience as a principal-level technical leader or strategist in a security organization operating at scale
• Experience defining security strategy for AI and machine learning systems, including model, data, and agent-related risk
• Experience quantifying security risk in financial or business terms to drive investment decisions
• Track record of industry-recognized contributions to security, such as published research, conference presentations, standards bodies, or open-source contributions
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Experience applying current threat intelligence on adversary tactics, techniques, and procedures to proactively shape defensive security architecture at scale