Product Security Engineer

Meta’s Security Engineering team is seeking a Product Security Engineer to help identify and mitigate security vulnerabilities across Meta’s infrastructure, applications, and platforms. This role works closely with engineering and product stakeholders to deliver systemic security improvements at scale using both offensive and defensive expertise.

Key Responsibilities

• Perform security assessments, threat modeling, and code reviews across Meta products and infrastructure to identify vulnerabilities and drive remediation
• Develop and implement scalable security tooling, automation, and frameworks that help detect and prevent security issues across the engineering organization
• Collaborate with engineering and product teams to embed security requirements into the design and development lifecycle
• Investigate security incidents, conduct root cause analysis, and translate findings into systemic mitigations and process improvements
• Identify gaps in security coverage and lead cross-functional efforts to address them through tooling, policy, or architectural changes
• Convert individual vulnerability findings into repeatable detection and remediation patterns that scale across the codebase
• Represent the security team in cross-functional collaborations by communicating risk posture and mitigation strategies to engineering leadership
• Mentor engineers on secure coding practices, vulnerability classes, and security review methodologies
• Manage and resolve security incidents independently, coordinating with cross-functional partners to support timely remediation

Required Qualifications

• 5+ years of experience in security engineering, including vulnerability research, penetration testing, or security assessments of applications and infrastructure
• Experience identifying and exploiting common vulnerability classes such as memory corruption, injection flaws, authentication bypasses, or privilege escalation
• Experience developing security tooling, automation, or detection frameworks using one or more general-purpose programming or scripting languages
• Experience conducting threat modeling and security design reviews for large-scale distributed systems or web and mobile applications
• Experience collaborating with cross-functional engineering teams to drive security mitigations and communicate risk via written and verbal updates
• Bachelor’s or Master’s degree in Computer Science or a related field, or equivalent technical security experience

Preferred Qualifications

• Demonstrated ongoing AI skill development (for example, prompt/context engineering and agent orchestration) and staying current with emerging AI technologies
• Demonstrated ability to integrate AI tools to optimize or redesign workflows and drive measurable impact, such as efficiency gains and quality improvements
• Experience adhering to and implementing responsible and ethical AI practices, including risk assessment, bias mitigation, and quality and accuracy reviews
• Familiarity with security challenges specific to large-scale social platforms, including account integrity, data access controls, and API security
• Experience building static or dynamic analysis tools to identify security vulnerabilities at scale across large codebases
• Contributions to the security community through public research, vulnerability disclosures, bug bounty programs, conference presentations, or open-source tooling
• Experience spanning both offensive security (for example, red teaming and exploit development) and defensive security engineering (for example, detection engineering and secure architecture design)

Location and Compensation

Location: Menlo Park, CA (onsite)

Compensation: USD 154,000 - 217,000 per year

Education

Education requirement: Bachelor’s or Master’s degree in Computer Science or related field