Application Security Engineer, Privacy
Meta London, England, United Kingdom
Software Development · 10,001+ employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
Lead technical triage and investigation of complex privacy incidents while designing scalable agentic AI systems to automate security operations. Partner with engineering teams to integrate privacy protections early in the development lifecycle and drive long-term technical projects.
What they look for
Requirements
Requires 5+ years of experience in technical privacy, security, or software engineering with proficiency in languages like Python, PHP, Java, or C/C++. Candidates must demonstrate experience in identifying real-world threats and utilizing AI tools for security analysis.
Full description
Meta's Privacy Engineering team is seeking a Security Engineer with experience in applying an adversarial mindset to identify, scope, contain, and eradicate real-world privacy threats to products and infrastructure. Your primary responsibilities will be to deal with privacy vulnerabilities by designing or guiding Software Engineers through remediations, learning from security/privacy incidents, identifying vulnerabilities in our codebase, and building agentic systems at scale to assist and perform these operations. Your skills will be the foundation of security initiatives that protect the security and privacy of billions of people. You will advance Meta’s mission of making the world more open and connected by identifying and neutralizing threats that aim to collect sensitive information or disrupt our systems.
Responsibilities
- Lead technical triage and investigation of complex privacy incidents - reviewing code, system architecture, logs, and other evidence to guide engineers through mitigation and remediation
- Design and build scalable agentic AI systems that can autonomously handle all aspects of incident response, discover and verify security/privacy vulnerabilities in product and infrastructure, and guide coding agents to write secure-by-default code
- Partner with engineering and product teams to improve designs, prioritize durable remediation, and shift privacy protections earlier in the development lifecycle
- Lead medium-to-large technical projects from ambiguous problem definition through implementation, adoption, measurement, and long-term ownership
Minimum Qualifications
- 5+ years of work experience in technical privacy, security, or security software engineering domains, including incident response, application privacy/security, and/or offensive security
- Experience identifying, analyzing, and remediating real-world privacy/security threats
- Software engineering proficiency equivalent to 1+ years of work experience in coding in Python, PHP, Java, C/C++, (or an equivalent language), including code maintenance and review
- Experience with using AI coding tools and agents in helping to investigate or discover security/privacy issues
Preferred Qualifications
- Experience mentoring engineers and creating documentation, training, tools, or processes that scale the people around you
- Experience improving the precision, coverage, reliability, or operational health of security or privacy systems
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
- Experience designing safeguards or frameworks that eliminate recurring classes of privacy or security issues
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Experience participating in or leading an incident-management oncall rotation
- Experience building AI agents or agent pipelines for code analysis, investigation, detection, verification, or remediation
- Experience with static or dynamic analysis, large-scale code search, data pipelines, or automated detection systems
Similar roles
-
Senior Baseline Security Engineer (CIS & STIGs)
phia, LLC United States · $125K–$175K/yr
-
Senior Security Engineer, Incident Response
Twilio United States · $142K–$208K/yr
-
SAP Application Security Consultant (GRC)
Accenture Federal Services Washington, District of Columbia, United States · $106K–$206K/yr
-
Sr Lead Security Engineer
JPMorgan Chase & Co. Jersey City, New Jersey, United States · $176K–$260K/yr
-
SAP Application Security GRC/BTP Consultant
Accenture Federal Services Washington, District of Columbia, United States · $92K–$179K/yr
-
Sr. Security Engineer
Octus United States