Product Security Engineer - Meta

Meta's Product Security team is seeking a passionate hacker who derives purpose in life by revealing potential weaknesses and then crafting creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over two billion people. You will be relied upon to provide engineering and product teams with the web, mobile, or native-code security expertise necessary to make confident product decisions. Come help us make life hard for the bad guys.

RESPONSIBILITIES

Product Security Engineer Responsibilities:

• Security Reviews: perform manual design and implementation reviews of products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Oculus, Portal, and more.
• Automated Analysis and Secure Frameworks: build automation (static and dynamic analysis) and frameworks with software engineers that enable Meta to scale consistently across all of our products.
• Developer Guidance: provide guidance and education to developers that help prevent the authoring of vulnerabilities.
• Bug Bounty: help provide technical guidance to our world class bug bounty program and independent security researchers.
• Industry Impact: push the industry forward through conference talks and open source projects to contribute broadly to security for the world.

MINIMUM QUALIFICATIONS

Minimum Qualifications:

• B.S. or M.S. in Computer Science or related field, or equivalent experience
• 5+ years of experience finding vulnerabilities in interpreted languages (php, python, ruby). Knowledge of best practice secure code development
• Experience with exploiting common security vulnerabilities.

PREFERRED QUALIFICATIONS

Preferred Qualifications:

• Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)
• Experience writing software that enables security processes