Security Analyst: Anti-Scraping Investigator

About the Role: Security Analyst: Anti-Scraping Investigator at Meta

Are you passionate about enhancing the privacy of users across Meta's family of apps? Do you possess an adversarial mindset and thrive on investigating and analyzing potential threats? Join Meta as a Security Analyst: Anti-Scraping Investigator.

Meta is seeking a Security Analyst with expertise in investigating and analyzing adversarial behavior, leveraging intelligence for decision-making, understanding privacy expectations and regulations, and a proven track record of technical success. This role is ideal for someone who loves to innovate in detecting, researching, and disrupting attackers by investigating entities and analyzing data to uncover patterns of automated abuse.

The Anti-Scraping team delivers actionable insights upstream and collaborates with engineering teams to implement scalable solutions through automation, making the internet a safer place. Candidates must be action-oriented, adept at identifying patterns in complex data, making rapid decisions, and adapting quickly. A background in a quantitative field, coupled with IT security expertise including bot detection/mitigation and web scraping, is highly valued. The position requires experience with large datasets and proficiency in data-driven decision-making. Successful individuals are results-oriented, self-motivated, and have a history of using analytics to reduce platform abuse and enhance user experience.

Security Analyst: Anti-Scraping Investigator Responsibilities:

• Discover, detect, investigate, and respond to anti-scraping attacks targeting Meta’s products, including threat actor attribution and analysis. Document findings in detailed, concise, and comprehensive reports.
• Develop and execute technical solutions to proactively identify and mitigate scraping risks.
• Manage multiple simultaneous investigations, contribute to scaling the team, growing and supporting other investigators, and drive tooling and investigative technique improvements.
• Proactively look for currently undetected abuse by leveraging internal data, open-source intelligence, and cyber threat intelligence.
• Refine and track operational metrics, key performance indicators, and service level objectives to measure the effectiveness of anti-scraping efforts.
• Collaborate with cross-functional teams—including security engineers, analysts, policy, legal, and product partners—to address privacy and abuse challenges.
• Build and maintain collaborative relationships with internal stakeholders to maximize the impact of anti-scraping initiatives.
• Stay current on emerging scraping tactics, techniques, and procedures, and share insights with the broader security organization.
• Drive and lead exploration of the scraping ecosystem, understand the scraping enabled business models, and the most significant risks and harms of scraping to users.

Minimum Qualifications:

• Bachelor's Degree in Computer Science, Data Engineering, Cyber Security, or a related field, or equivalent technical work experience.
• 5+ years of investigative experience conducting technical and non-technical investigations of online threats and abuse.
• 3+ years experience with complex SQL queries to drive analysis and insights.
• 3+ years experience in leveraging intelligence in driving investigative and/or technical decision making.
• 3+ years experience conducting OSINT and attribution investigations.
• Experience with network analysis.

Preferred Qualifications:

• Experience with all source intelligence analysis to drive decision making.
• Experience with, and exposure to, Linux/Unix environment, PHP, Python, Java, or other programming/scripting languages, TCP/IP protocol stack, and a variety of operating systems.
• Experience applying data analytics to security risk analysis and investigations.
• Adversarial experience and understanding how threat actors manifest on the internet.
• Experience summarizing and communicating technical data to a non-technical audience.

Key skills/competency

• Anti-Scraping
• Threat Investigation
• Data Analysis
• SQL
• OSINT
• Cyber Security
• Bot Detection
• Network Analysis
• Privacy Protection
• Adversarial Mindset