Security Engineer, Anti-Scraping

Meta•Menlo Park, CA

About The Position

Are you interested in solving complex problems that are geared towards improving the privacy of people using Meta's family of apps? Do you have an adversarial mindset and are excited about investigating and analyzing potential threats? Come join us at Meta! Meta is seeking a Security Engineer with extensive experience investigating and analyzing adversarial behavior, knowledge of privacy expectations and regulations, and a proven track record of technically leading teams to support our Anti Scraping organization. The person will be responsible for scaling anti scraping investigations with the goal of proactively identifying and responding to privacy risks posed to Meta’s users and products. The impact of this work is substantial, with the potential to protect people around the world who use our products. Successful candidates have a bias toward action and enjoy finding patterns amid chaos, making quick decisions, and aren't afraid of being wrong. The ideal candidate will have a background in a quantitative field as well as IT security, bot detection/mitigation, scraping etc. The candidate will have experience working with large data sets and have demonstrated success in using analytics to reduce abuse and negative user experiences across the platform.

Requirements

Bachelor’s or Master’s degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience
8+ years of experience in security engineering, incident response, or adversarial analysis within large-scale, regulated environments
Hands-on experience with bot detection, scraping mitigation, and threat actor analysis
Proficiency in one or more functional or scripting languages (e.g., Python, JavaScript, PHP, OCaml)
Experience analyzing large data sets and applying data-driven decision making to reduce abuse
Demonstrated understanding of networking technologies, operating systems (Windows, macOS, Linux), and web protocols
Must be able to work cross-functionally with technical and non-technical teams
Experience delivering technical findings and program status updates to leadership

Nice To Haves

Experience querying large data sets and SQL
Experience working with global teams
Demonstrated interest in understanding the intersection of global security risks, privacy, and technology, especially as it pertains to Meta
Familiarity with privacy regulations and expectations

Responsibilities

Provide technical direction and guidance within the domain to team members
Influence and align the organization’s vision and strategy, while engaging your team to develop and deliver specific roadmaps and projects. Ensure prioritization, resourcing, and timely delivery of this work within a fast paced business environment
Discover, detect, investigate, and respond to anti-scraping attacks targeting Meta’s products, including threat actor attribution and analysis
Develop and execute technical solutions to proactively identify and mitigate scraping risks
Refine and track operational metrics, key performance indicators, and service level objectives to measure the effectiveness of anti-scraping efforts
Collaborate with cross-functional teams—including security engineers, analysts, policy, legal, and product partners—to address privacy and abuse challenges
Build and maintain relationships with internal stakeholders to maximize the impact of anti-scraping initiatives
Contribute to the development and delivery of multi-year roadmaps and projects focused on scaling anti-scraping investigations and response capabilities
Leverage automation and data-driven approaches to improve detection, investigation, and remediation processes
Stay current on emerging scraping tactics, techniques, and procedures, and share insights with the broader security organization
Mentor and support team members, fostering a collaborative technical and continuous improvement environment