Privacy Engineer, Red Team

Meta•Menlo Park, CA

About The Position

Meta's Privacy Red Team is seeking experienced, passionate ethical hackers who thrive on discovering privacy weaknesses, to better protect user privacy of over a billion people. Your adversarial mindset and offensive privacy skills will be put to work carrying out offensive privacy testing on operations across our products and services. You will partner with engineering and product teams, in driving remediation of weaknesses you have identified, to ensure that Meta leads with world-class privacy practices.

Requirements

5+ years experience in a related discipline such as red teaming, penetration testing, vulnerability research, product security or security/privacy research
3+ years hands-on offensive testing skills (e.g. offensive security, pentesting, red teaming, vulnerability research, etc.)
2+ years experience of scripting (PHP, Python, Perl, Ruby, etc.)
Communication experience with researchers, engineering and product teams

Nice To Haves

Experience with offensive testing of at least one of the following: web, iOS, Android
Experience with big data and relational databases (Hive, Presto, MySQL, etc.)
Contributions to the privacy or security community (participation in bug bounty programs, public research, blogging, presentations, etc.)

Responsibilities

Execute technical, hands-on, offensive privacy testing to identify and exploit privacy weaknesses
Work with cross-functional teams to drive remediation of privacy weaknesses
Effectively communicate findings from operations to a technical audience
Continuously identify and test ways that we can be better by improving team processes
Be an advocate for best practice in protecting user data against privacy threat actors
Planning and leading campaign-style red team operations testing response teams