Infrastructure Security Engineer

About the position

The Security Posture Management team's mission lies at the intersection of empowering engineers to work efficiently with minimal friction and maintaining the highest standards of security controls for our critical infrastructure. We are looking for a highly motivated and experienced Security Engineer to join our team! As a key member of the team, you will play a critical role in ensuring the security of Meta's infrastructure. This is an exciting opportunity if you are passionate about solving complex security problems through innovative engineering solutions.

Responsibilities

• Scale the identification of risky infrastructure, insecure patterns, and vulnerabilities that may impact Meta's data and systems in the cloud and on-prem.
• Collaborate with other software, platform, and security engineers to design and ensure continuous security in alignment with Meta's own baselines of security best practices.
• Work closely with business verticals to reduce friction from security controls while enabling Meta to securely move and iterate quickly.

Requirements

• 5+ years of experience securing complex on-prem or cloud deployments
• 5+ years of experience writing IAC (Infrastructure as Code) deployments for complex systems (Terraform, SaltStack, Ansible)
• 5+ years of experience writing code in Python, PHP, Java, Ruby, Go, Rust, C/C++, or similar languages
• Experience addressing security problems by building scalable engineering solutions
• Proven written and verbal communication skills to convey complex technical issues to both security and non-security audiences
• Experience in reviewing distributed systems design and conducting threat model assessment of software and services
• B.S. or M.S. in Computer Science or related field, or equivalent experience

Nice-to-haves

• Experience influencing software engineers building security products
• Experience creating metrics to measure service and program effectiveness and consistency
• Experience making contributions to the security or privacy community (public research, OSS, blogging, presentations, etc.)