Security Detection Engineer, Insider Trust

As part of Meta Security, our Insider Trust team is focused on identifying and responding to insider threats to data. The team's mission is to identify malicious use of otherwise legitimate access to data from people inside the company and respond to it before damage is done. We investigate across a broad spectrum of abuse including abuse of user data, intellectual property, and leaks of sensitive information. We collaborate with software engineering teams to build advanced detection capabilities and understand how abuse happens so that we can stay ahead of those who are interested in misusing their access.

The Insider Trust team is looking for a highly motivated Security Engineer to build and improve internal tools and systems to detect malicious activities related to insider threats. Candidates are expected to analyze and monitor internal tools, hunt for insider threats against company data and infrastructure, and have the ability to carry out complex internal investigations from collection to reporting. As part of the role, this person will work side by side with our engineering teams to build advanced detection solutions to help keep systems and information safe, and partner closely with our Human Resources and Legal teams to carry out complex investigations.Security Detection Engineer, Insider Trust Responsibilities

• Lead cross-functional projects to improve our capabilities to effectively detect and respond to security incidents
• Perform analysis against logs from a variety of sources (e.g., individual host logs, network traffic logs) to identify potential threats and detection ideas
• Support security incident response in a cross-functional environment and drive incident resolution
• Build logging pipelines using our custom datasets and infrastructure
• Identify gaps in our infrastructure, and work with software engineers, product managers, and business partners to gain visibility through logging and detection
• Leverage threat modeling and analysis to build event and/or behavioral based detections to protect our critical assets and infrastructure

Minimum Qualifications

• Bachelor's degree in Computer Science, Engineering, or equivalent experience
• 3+ years of experience in Detection & Response Engineering or similar Security Engineering role
• Experience analyzing network and host-based security events
• Coding experience in Python and/or one or more general purpose languages
• Experience with attacker tactics, techniques, and procedures

Preferred Qualifications

• M.S. or PhD in Computer Science or related field, or equivalent experience
• Experience with anomaly detection applicable to the insider threat detection space
• Experience in security-focused software engineering, designing large scale systems and data pipelines, or offensive security
• Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigates suspicious behavior across networks and systems
• Broad knowledge across the Security domain, as well as demonstrated experience in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Offensive Security Testing, Detection and/or Response tooling development
• Coding proficiency in Pandas, NumPy, Scikit-learn, TensorFlow
• Knowledge of networking technologies, specifically TCP/IP and the related protocols
• Knowledge of operating systems, file systems, and memory structures on Windows, MacOS and Linux

For those who live in or expect to work from California if hired for this position, please click here for additional information. LocationsAbout Meta Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.
$117,000/year to $173,000/year + bonus + equity + benefits

Individual compensation is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base hourly rate, monthly rate, or annual salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base compensation, Meta offers benefits. Learn more about benefits at Meta.

Equal Employment Opportunity and Affirmative Action Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. You may view our Equal Employment Opportunity notice here.
Meta is committed to providing reasonable support (called accommodations) in our recruiting processes for candidates with disabilities, long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support. If you need support, please reach out to accommodations-ext@fb.com.