Address Meta Security is looking for an Incident Response Engineer with experience in the identification, containment and mitigation of security incidents. You will be analyzing different data sources to detect, investigate and respond to internal and external threats. You will also be working with our software and production engineering teams to develop scalable systems to automate detection and remediation and help us build the next generation of security operations and response platforms.
Security Engineer, Incident Response Responsibilities:
Minimum Qualifications:
Preferred Qualifications:
About Meta:
Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.
Security Engineer, Incident Response Responsibilities:
- Lead security Incident Response in a cross-functional environment and drive incident resolution.
- Lead and develop Incident Response initiatives that improve Meta’s capabilities to effectively respond and remediate security incidents.
- Perform digital forensic acquisition and analysis of a wide variety of assets including endpoints, mobile, servers and networking equipment.
- Perform log analysis from a variety of sources (e.g., individual host logs, network traffic logs) to identify potential threats.
- Build automation for response and remediation of malicious activity.
Minimum Qualifications:
- 7+ years of experience in Security Incident Response, Investigations and Response Engineering.
- Knowledge of networking technologies and experience analyzing network-based security events.
- Knowledge of operating systems, file systems, and memory structures and experience in host and memory forensics (including live response) on Windows, macOS and Linux.
- Experience investigating and responding to both external and insider threats.
- Coding/scripting experience in one or more general purpose languages.
- Experience with attacker tactics, techniques, and procedures.
- Bachelor's degree or equivalent experience in Security.
Preferred Qualifications:
- Experience as a Lead Security Incident Responder and Investigator in a large and regulated organization.
- Background in malware analysis, digital forensics, intrusion detection, and/or threat intelligence.
- Experience in threat hunting including the ability to leverage intelligence data to proactively identify and iteratively investigates suspicious behavior across networks and systems.
- Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development.
