Security Engineer, Investigator - i3E Account Threats & Scams

The Integrity, Investigations, and Intelligence (i3E) Account Threats team is dedicated to protecting the users of Meta's family of applications (e.g. Facebook, Instagram, WhatsApp, Threads, Reality Labs) from the worst kinds of account security issues we experience. You will have the opportunity to have impact by solving the most complex problems Meta faces in account security. Your work will positively affect the billions of people who use our products. We are seeking an experienced security engineer to proactively detect and analyze root causes of scams, account security abuses, investigate complex threats to our business and our users, advance investigative methods and AI tooling, conduct quantitative and qualitative decision making, and use novel approaches to protect our users from harm.

Security Engineer, Investigator - i3E Account Threats & Scams Responsibilities:

• Hunt for threats and undetected abuse by leveraging internal data, open source intelligence, and third-party private intelligence
• Investigate complex account security abuses to understand in granular detail how abuse is occurring. Identify and implement appropriate detection or prevention strategies to mitigate harm both in the current case and from similar forward-looking abuse
• Apply subject matter knowledge of adversary tactics, techniques, procedures, and tools to identify and mitigate threats
• Build signatures (e.g. file, network) to detect, hunt, and prevent malware compromise
• Lead technical investigations from start-to-finish, to include effectively communicating actionable results, analytic judgments, and mitigations to different audience types across cross-functional settings
• Identify trends in adversary behavior, and proactive surfacing of risks that may represent previously unidentified or novel vectors for harm. Understand how abuse manifests and clearly explain emerging threats and trends, with an emphasis on security understanding
• Analyze and interpret complex, high volume, and high dimensionality data from varying sources to advance investigations, quantify trends, or support findings
• Lead identifying, prototyping, and teaching novel investigative techniques
• Partner with other cross-functional teams to identify, influence, and implement holistic solutions to surfacing and responding to emerging threats
• Manage multiple projects at once while effectively prioritizing time, based on team priorities
• Use AI to advance investigations and automate the everyday tasks and actions conducted during investigations and team processes

• 5+ years work experience in a cyber security, security investigations, or cyber threat intelligence investigations role
• Adept at building queries to analyze and interpret large datasets to advance investigations, quantify trends or support findings
• Experience investigating and acting on high-impact threats such as account compromise, account automation tooling, account creation abuse, business compromise, scams, phishing attacks or malware analysis
• Proficiency working with Python, PHP, or similar scripting languages
• Experience thinking critically and qualifying assessments with solid communications skills in a cross-functional setting to influence decision makers across all levels of technical background
• Experience identifying effective strategies to prevent or disrupt abuse at scale. Consult on the design of countermeasures to affect those strategies

• Experience with advanced use or building of AI tooling (LLMs, embeddings, fine-tuning, RAG, agentic workflows) to augment investigative workflows