Job Description

Meta's Central Security team is looking for a security engineer who can find weaknesses before attackers do and then build the solutions that eliminate them. Your work will form the foundation of security initiatives that protect the privacy and safety of more than three billion people.

In this role, you'll be the expert that engineering and product teams turn to for AI security and native-code security guidance, giving them the confidence to make sound product decisions. Join us in protecting Meta's products and the people who use them.

Responsibilities

Provide security guidance on a constant stream of new products and technologies

• Take a leadership role in driving internal security and privacy initiatives
• Analyze, assess, and respond to various internet threats
• Interact directly with the security community regarding mobile security vulnerabilities and threats
• Conduct regular security assessments, specializing in mobile platform and application code

Qualifications

B.S. or M.S. in Computer Science or related field, or equivalent experience

• 8+ years of experience in security engineering, including vulnerability research, penetration testing, or security assessments of production systems
• 3+ years programming experience with at least one of the following languages: Python, PHP, Ruby, or similar scripting languages
• 4+ years of experience reviewing C and C++. Knowledge of best practice secure code development
• Working knowledge of security architecture principles, least privilege
• Experience identifying and mitigating security and privacy risks in internet-facing products or services Demonstrated knowledge of iOS or Android security model
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Experience leveraging or developing mitigations
• Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)
• Experience with static analysis and fuzzing
• Knowledge of exploitation techniques, reverse engineering, or CTF experience
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Knowledge of memory safe programming languages: Rust, Obj-C , Java/Kotlin