Security Engineer - IR Threat Intelligence

About Meta

Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at accommodations-ext@meta.com.

Role Overview: Security Engineer - IR Threat Intelligence

Meta Security is actively seeking a threat intelligence investigator to join their team. This role requires extensive experience in investigating cyber threats through an intelligence-driven approach. You will be instrumental in proactively responding to a wide range of security threats and meticulously tracking actor groups that possess the interest or capability to target Meta and its employees.

A critical aspect of this position involves identifying gaps in current detection and prevention mechanisms through long-term intelligence tracking and research. You will collaborate with cross-functional stakeholders to enhance and fortify Meta’s overall security posture.

Security Engineer - IR Threat Intelligence Responsibilities:

• Track threat clusters targeting Meta's infrastructure and employees, and implement countermeasures.
• Investigate, mitigate, and forecast emerging technical trends, communicating actionable suggestions.
• Provide timely and useful intelligence to incident responders for ongoing investigations.
• Improve threat cluster tracking and intelligence data integration tooling.
• Engage in cross-functional projects to enhance Meta's security infrastructure.

Minimum Qualifications:

• 5+ years of dedicated threat intelligence experience.
• Bachelor's degree or equivalent experience in Security.
• Familiarity with campaign tracking techniques and converting results to countermeasures.
• Proficiency with threat modeling frameworks (e.g., Diamond Model, MITRE ATT&CK).
• Experience in intelligence-driven hunting to identify network risks.
• Proven track record of managing and executing both short and long-term projects.
• Ability to collaborate with geographically dispersed teams across multiple time zones.
• Capable of prioritizing and executing tasks with minimal oversight.
• Critical thinking and strong communication skills for assessment qualification.
• Coding or scripting experience in Python or PHP.

Preferred Qualifications:

• Experience closely collaborating with incident responders on investigations.
• Familiarity with malware analysis or network traffic analysis.
• Knowledge of nation-state, sophisticated criminal, or supply chain threats.
• Proficiency in producing file-based or network-based rules (YARA, Snort).
• Experience with query languages such as SQL.
• Experience writing production code for threat intelligence tooling.
• Experience conducting large-scale data analysis.
• Experience working within the broader security community.

Key skills/competency:

• Threat Intelligence
• Incident Response
• Cyber Security
• Threat Hunting
• MITRE ATT&CK
• Campaign Tracking
• Security Posture
• Data Analysis
• Python
• Network Traffic Analysis