Product Security Engineer

Meta's Security Engineering team is looking for a Security Engineer to help protect the billions of people who use Meta's family of products and services. In this role, you will identify and mitigate security vulnerabilities across Meta's infrastructure, applications, and platforms, working closely with engineering and product teams to drive systemic security improvements at scale. You will apply deep technical expertise in offensive and defensive security to reduce risk and build resilient systems that safeguard user data and platform integrity.Conduct security assessments, threat modeling, and code reviews across Meta's products and infrastructure to identify and remediate vulnerabilities Develop and implement scalable security tooling, automation, and frameworks to detect and prevent security issues across the engineering organization Partner with engineering and product teams to embed security requirements into the design and development lifecycle Investigate security incidents and drive root cause analysis, translating findings into systemic mitigations and process improvements Identify gaps in security coverage and drive cross-functional efforts to close them through tooling, policy, or architectural changes Turn one-off vulnerability findings into repeatable detection and remediation patterns that scale across the codebase Represent the security team in cross-functional collaborations, communicating risk posture and mitigation strategies to engineering leadership Mentor other engineers on secure coding practices, vulnerability classes, and security review methodologies Manage and independently resolve security incidents, coordinating with cross-functional partners to drive timely remediation5+ years of experience in security engineering, including vulnerability research, penetration testing, or security assessments of applications and infrastructure Experience identifying and exploiting common vulnerability classes such as memory corruption, injection flaws, authentication bypasses, or privilege escalation Experience developing security tooling, automation, or detection frameworks in one or more general-purpose programming or scripting languages Experience conducting threat modeling and security design reviews for large-scale distributed systems or web and mobile applications Experience collaborating with cross-functional engineering teams to drive security mitigations and communicate risk in written and verbal formats Bachelor's or Master's degree in Computer Science or related field or equivalent technical security experience Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews) Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews) Familiarity with security challenges specific to large-scale social platforms, including account integrity, data access controls, and API security Experience building static or dynamic analysis tools to identify security vulnerabilities at scale across large codebases Contributions to the security community through public research, vulnerability disclosures, bug bounty programs, conference presentations, or open-source tooling Experience with both offensive security techniques (e.g., red teaming, exploit development) and defensive security engineering (e.g., detection engineering, secure architecture design)Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today-beyond the constraints of screens, the limits of distance, and even the rules of physics.Meta is proud to be an Equal Employment Opportunity employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. You may view our Equal Employment Opportunity notice here .Meta is committed to providing reasonable accommodations for qualified individuals with disabilities and disabled veterans in our job application procedures. If you need assistance or an accommodation due to a disability, fill out the Accommodations request form .