Infrastructure Security Monitoring Engineer

Meta•Menlo Park, CA

6d•$154,000 - $217,000

About The Position

Meta's Infrastructure Security Monitoring (ISM) team seeks an experienced engineer to help secure the infrastructure connecting over a billion users. The engineer will build, implement, and operationally support detections throughout Meta's infrastructure, researching and developing solutions to protect infrastructure and users. The role focuses on identifying scalable detection opportunities, codifying solutions, and defending infrastructure against malicious actors. Areas of focus include large-scale DDoS detection, security tool development, and defense against internal and external attacks. The engineer will improve security posture, lead incident mitigation and investigation, and develop detection, mitigation, and response automation. They will evaluate security initiatives and work across engineering teams to promote security practices while actively operating and defending critical infrastructure.

Requirements

Bachelor's degree in Computer Science, Computer Engineering, a relevant technical field, or equivalent practical experience. The degree must be completed before joining Meta.
At least 3 years of development experience in at least one programming language, such as Python or Go, applying it to security tool development, automation, and programmatic infrastructure defense solutions.
At least 4 years of experience in offensive or defensive security, or systems engineering.
Experience researching, building, and implementing defensive security systems used against internal and external attack vectors.
Experience designing and building application, system, and network security monitoring for detection or forensic investigations.

Nice To Haves

Experience threat hunting by using threat intelligence to iteratively investigate potential risks and find suspicious behavior.
Background in intrusion detection, security investigations, and incident response.
Understanding of the MITRE ATT&CK Framework and associated threat actor techniques.
Ongoing AI skill development, such as prompt/context engineering or agent orchestration, and keeping current with emerging AI technologies.
Experience developing automation and using frameworks to scale detection, mitigation, or response tools.
Experience implementing responsible and ethical AI practices, such as risk assessment, bias mitigation, and quality and accuracy reviews.
Experience developing baselines and investigating anomalies to identify suspicious behavior.
Ability to integrate AI tools to optimize or redesign workflows and drive measurable impact, such as efficiency gains or quality improvements.
Experience mentoring and promoting industry security practices.

Responsibilities

Iterate security posture to better protect against attacks and detect new vectors.
Lead efforts to mitigate and investigate security incidents.
Use frameworks to develop and scale detection, mitigation, and response automation tooling.
Evaluate and test new vendor and home-grown initiatives for security issues.
Mentor and promote security practices through cross-functional work with engineering teams throughout Meta.
Actively operate and defend critical infrastructure to keep Meta safe.