Security Analyst: Anti-Scraping Investigator - Meta

Are you interested in solving complex problems that are geared towards improving the privacy of people using Meta's family of apps? Do you have an adversarial mindset and are excited about investigating and analyzing potential threats? Come join us! The Anti-Scraping team is looking for someone who loves reimagining what's possible when it comes to detecting, researching, and disrupting attackers by investigating entities and analyzing data to uncover patterns of automated abuse. The team provides actionable insights upstream and works with our engineering teams to constantly implement solutions at scale through better automation strategies to make the internet a safer place for all. Successful candidates for this team have a bias toward action and enjoy finding patterns amid chaos, making quick decisions, and aren't afraid of being wrong. The ideal candidate will have a background in a quantitative field as well as IT security, bot detection/mitigation, scraping etc. The candidate will have experience working with large data sets and will have in-depth experience in data-driven decision making. You are scrappy, focused on results, a self-starter, and have demonstrated success in using analytics to reduce abuse and negative user experiences across the platform.

RESPONSIBILITIES

Security Analyst: Anti-Scraping Investigator Responsibilities:

• Investigate complex cases using a variety of methodologies (on and off platform) to understand how abuse is occurring and attribute the entity(ies) responsible. Identify enforcement strategies to mitigate harm both in the current case and from similar forward-looking abuse. Document findings in detailed, concise, and comprehensive reports.
• Engage cross-functionally with other analytic and investigative teams within the company to develop best practices for conducting investigations, training, and tracking and reporting on investigation trends to the team and supporting legal and technical enforcement actions against bad actors.
• Manage multiple simultaneous investigations, contribute to scaling the team, growing and supporting other investigators, and drive tooling and investigative technique improvements.
• Drive development of strategy in investigations to improve tactics, discoverability of threats, and enhance efficiencies.
• Proactively look for currently undetected abuse by leveraging internal data, open-source intelligence, and third party private intelligence.
• Drive and lead exploration of the scraping ecosystem, understand the scraping enabled business models, and the most significant risks and harms of scraping to users.

MINIMUM QUALIFICATIONS

Minimum Qualifications:

• 5+ years of investigative experience conducting technical and non-technical investigations of online threats and abuse.
• 3+ years experience writing complex SQL queries to drive analysis and insights
• 3+ years experience conducting OSINT and attribution investigations.

PREFERRED QUALIFICATIONS

Preferred Qualifications:

• Experience with, and exposure to, Linux/Unix environment, PHP, Python, Java, or other programming/scripting languages, TCP/IP protocol stack, and a variety of operating systems.
• Experience applying data analytics to security risk analysis and investigations
• Adversarial mindset and understanding how threat actors manifest on the internet
• Experience summarizing and communicating technical data to a non-technical audience
• Experience with network analysis