Security Engineer, Vulnerability Management

$147,000 - $208,000/Yr

Meta - Bellevue, WA

Full-time - Mid Level

Bellevue, WA

Web Search Portals, Libraries, Archives, and Other Information Services

About the position

The Security Engineer position at Meta focuses on enhancing the company's security posture through a robust vulnerability management program. The role involves analyzing vulnerabilities, driving solutions for vulnerability contextualization and remediation, and collaborating with cross-functional teams to improve security measures across the organization. The engineer will also provide rapid-response analysis for critical vulnerabilities and contribute to the overall vulnerability management strategy.

Responsibilities

• Analyze vulnerabilities to determine the real impact to our systems and applications, incorporating threat intelligence.
• Drive solutions that enable high fidelity vulnerability contextualization, tracking, and remediation.
• Influence areas of the vulnerability pipeline that would benefit from automation to improve operational efficiency.
• Dive into large datasets to identify strategic opportunities for security posture improvement.
• Influence the Meta-wide vulnerability management strategy, collaborating with partners to deliver multi-year roadmaps.
• Coach and support team members in vulnerability management practices.
• Provide rapid-response vulnerability analysis for active zero-days and participate in regular on-call vulnerability management rotation.

Requirements

• 5+ years of experience in identifying security vulnerabilities, issues, risks, and developing mitigation plans.
• 4+ years of experience in network, system, or software architecture: design, implementation, support, and evaluation of security-focused tools and services.
• Technical and process subject matter expert regarding vulnerability management operations and company-wide programs to address risk at scale.
• Experience responding to both external and insider threats.
• Coding/scripting experience in one or more general purpose languages.

Nice-to-haves

• Experience generating automated metrics to measure service and program effectiveness and consistency.
• Experience making contributions to the security or privacy community (public research, blogging, presentations, etc.).
• Background in malware analysis, digital forensics, intrusion detection, and/or threat intelligence.
• Broad knowledge across the security domain.
• Experience with attacker tactics, techniques, and procedures.

Benefits

• Health insurance
• 401k
• Paid holidays
• Flexible scheduling
• Professional development
• Tuition reimbursement
• Wellness programs