Application Security Engineer, Privacy

Job description

Meta's Privacy Engineering team is seeking a Privacy Engineer with experience in identifying, scoping, containing and eradicating real-world privacy threats to products and infrastructure. Your primary responsibility will be to deal with privacy vulnerabilities by designing and guiding Software Engineers through remediations, learning from security/privacy incidents, and identifying vulnerabilities across our codebase at scale.

Your skills will be the foundation of security initiatives that protect the security and privacy of billions of people. You will advance Meta’s mission of making the world more open and connected by identifying and neutralizing threats that aim to collect sensitive information or disrupt our systems.

Responsibilities

Incident triage and fact identification

Get the right people involved to understand what has happened and assess impact

• Follow the facts uncovered in triage to mitigate and remediate the vulnerability
• Review and understand what happened and ensure that the root cause and contributing factors are identified, documented, and remediated
• Apply technical understanding to ensure Meta learns from each incident to ensure it doesn't resurface Build AI agents and agent pipelines to help discover, prevent, and remediate vulnerabilities and privacy issues across all Meta products

Qualifications

B.S. or M.S. in Computer Science or a related field, or equivalent work experience

• 5+ years work experience in technical privacy or security engineering domains, including incident response, application privacy/security, and/or offensive security
• 5+ years work experience coding in Python, PHP, Java, C/C++ (or equivalent language) including code maintenance and review Experience identifying, analyzing, and remediating real-world privacy/security threats
• 7+ years work experience in technical privacy or security engineering domains, including incident response, application privacy/security, and/or offensive security
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Technical contributions to the privacy or security community (e.g., public research, blogging, presentations) Experience within a corporate environment communicating technical issues and their implications to other areas of the business Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies Technical experience across other Privacy or Security disciplines, such as Application Security or Privacy