Security Engineer, Investigations - i3E

The Integrity, Investigations, and Intelligence (i3) teams at Meta are dedicated to protecting the users of our family of applications (e.g. Facebook, Instagram, WhatsApp, Oculus) from a multitude of threats to include state-sponsored influence campaigns. We are seeking a security engineer to investigate sophisticated threat actors, advance investigative methods, automate and mature team processes through tooling, drive innovative approaches to protecting people from offline harm, and lead across a group of cross-functional problems to find scaled solutions to counter the risk of influence campaigns. You will have the opportunity to work on some of the most challenging, complicated, and high-visibility risks the company is facing.

Security Engineer, Investigations - i3E Responsibilities:

• Engage cross-functionally with other teams to develop shared taxonomy, implement effective strategies to prevent and disrupt abuse at scale and represent i3 across the problem space
• Assist in the development of the team's long-term strategy to improve tactics, discoverability of threats, and enhance investigative efficiencies
• Proactively hunt for threats and undetected abuse by leveraging internal data, open-source intelligence, and third party private intelligence
• Investigate complex cases to understand how abuse is occurring and implement enforcement strategies to mitigate and/or detect harm
• Identify areas to automate investigative tooling and tradecraft
• work through others to ensure successful implementation beyond the immediate team
• Analyze and interpret large datasets to advance investigations, quantify trends or support findings
• Address sensitive content issues, including but not limited to graphic images, videos and writings, offensive or derogatory language, and other objectionable material
• This role involves exposure to graphic and/or objectionable content including but not limited to graphic images, videos and writings, offensive or derogatory language, and other potential objectionable material, i.e. child exploitation, graphic violence, self-injury, animal abuse, and other content which may be considered offensive or disturbing

• 8 + years of work experience in cyber security, private sector security investigations and intelligence, government, and/or intelligence
• 5 + years of experience working with Python, PHP or similar scripting languages
• 2 + years experience as technical lead or team lead in an adversarial and/or investigative space with experience driving team strategic direction
• Proven experience conducting large scale data analysis and utilizing big data tools such as Maltego, Palantir, Tableau, etc
• Track record of proficient communication and presenting technical findings
• Experience investigating and acting on high-impact threats
• Experience prioritizing and executing with minimal direction or oversight
• Experience in fast-paced environments where priorities shift and change
• A combination of investigative skills and engineering skills
• Experience working with a team spanning multiple locations/time zones

• Experience working or managing projects that have enterprise-wide impact and/or multi-organization cross functional stakeholders
• Subject matter expertise with nation state actors, state-sponsored threat actor campaigns, influence operations or cyber-espionage
• Familiarity with sophisticated cyber threats
• BS/MS or equivalent experience in Computer Science, Information Systems, Intelligence Studies, Cybersecurity or related field
• Experience leading and empowering teammates
• Experience contributing to the security community (open source, academic research, industry research, blogs, presentations, etc.)