This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
Meta's Product Security team is seeking a experienced hacker who derives purpose in life by revealing potential weaknesses and then crafting creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over two billion people. You will be relied upon to provide engineering and product teams with the web, mobile, or native code security expertise necessary to make informed product decisions. Come help us make life hard for the bad guys.
Job Responsibility:
Security Reviews: perform manual design and implementation reviews of products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Oculus, Portal, and more
Developer Guidance: provide guidance and education to developers that help prevent the authoring of vulnerabilities
Automated Analysis and Secure Frameworks: build automation (static and dynamic analysis) and frameworks with software engineers that enable Meta to scale consistently across all of our products
Requirements:
BS or MS in Computer Science or a related field, or equivalent experience
8+ years of experience finding vulnerabilities in interpreted languages
Knowledge of best practice secure code development
Experience with exploiting common security vulnerabilities
Knowledge of common exploit mitigations and how they work
Coding and scripting experience in one or more general purpose languages
Nice to have:
Experience creating software that enables security processes, especially those leveraging AI/ML for automation or augmentation
Experience integrating or building AI-powered tools to assist with vulnerability detection, code review, or threat modeling
Experience creating software that enables security processes
8+ years of experience finding vulnerabilities in C/C++ code
Contributions to the security community (public research, blogging, presentations, bug bounty)
Demonstrated ability to collaborate with AI researchers or engineers to apply AI in security workflows