Security Engineer - Asset Management

Meta Security is looking for a passionate, innovative, and motivated Security Engineer for the Meta Asset Management team. Our team is a mix of software and security engineers who work together to build a product that empowers security teams at Meta to prioritize and right-size security.

We are responsible for the discovery, inventory, enrichment, classification, and visualization of all of Meta’s products and applications. We do this by building services that model Meta’s services, applications, code, and infrastructure on a graph, enabling high fidelity insights into where our greatest threats and risks lie.

As a Security Engineer on our team, you will dive deep into Meta’s infra and application stack to define security signals for us to collect, and then write algorithms to normalize those signals into a sensitivity score. You will write software to implement these algorithms in a framework developed by software engineers. Our security engineers partner with a wide range of security teams to understand their security goals and design asset-centric solutions to support them (e.g. using asset sensitivity to prioritize SIEM alerts and contextualize vulnerabilities, using the asset graph to describe incident blast radius, etc).

Does the idea of having a meaningful and measurable impact on the security of one of the world's largest infrastructures, which serves billions of people, sound both scary and exciting to you? Well, good news, we need your help!Security Engineer - Asset Management Responsibilities

• Develop and implement algorithms to model intrinsic and transitive risk labels for our infrastructure and software. This data is used by security teams across the company to make prioritization decisions
• Work with a team of software and security engineers that design, build, and own software solutions that scale high fidelity asset inventory and contextualization.
• Partner with other security teams to understand their security objectives and how our team can support them.
• Implement automation to improve our operational efficiency.
• Help define and drive the Meta-wide asset management roadmap.

Minimum Qualifications

• 5+ years experience building and securing enterprise-scale infrastructure software and services
• 5+ years of experience in network, system, or software architecture design, implementation, support, and evaluation of security-focused tools and services
• Proficiency with at least one scripting or coding language.
• Proven understanding in one or more infrastructure domains, e.g. compute, storage, crypto, etc.

Preferred Qualifications

• Experience influencing software engineers building security products
• Experience creating metrics to measure service and program effectiveness and consistency
• Experience making contributions to the …