Security Engineer, Incident Management & Regulatory Compliance

Meta Security is looking for an Security Engineer with experience in the identification, containment and mitigation of security incidents, along with experience working with audit and compliance team. You will be helping to lead discussions and represent XDR as part of our first line of defense with audit and regulatory consumers. In this role you will build a broad level of awareness and expertise in the people, process, and technological solutions that Meta has created to protect and defend our user data and company from threats.
You will also be working with our software and production engineering teams to develop scalable systems to automate evidence collection and continuous monitoring.Security Engineer, Incident Management & Regulatory Compliance Responsibilities

• Lead compliance evidencing and scoping for detection and response in a cross-functional environment.
• Represent the Detection and Response pillars as part of the first line of defense with auditors and regulators, sharing your technical and policy/governance expertise.
• Design, establish and maintain continuous monitoring of key controls and evidence on behalf of the XDR team.
• Embed with our Detection Engineering and Response teams to develop and then represent a deep understanding of our people, process and technologies in place to secure our user data and platforms.
• Perform security incident root cause analysis and drive implementation of containment and mitigation strategies.

Minimum Qualifications

• 7+ years of experience in Security Incident Response and Detection & Response Engineering.
• Knowledge of compliance and regulatory frameworks such as GDPR, EEPC, or PCI.
• Knowledge of operating systems, file systems, and memory structures on Windows, macOS and Linux.
• Experience investigating and responding to both external and insider threats.
• Coding/scripting experience in one or more general purpose languages.
• Experience with attacker tactics, techniques, and procedures.
• Bachelor's degree or equivalent experience in Security.

Preferred Qualifications

• Experience as a Lead Security Incident Responder and Investigator in a large and regulated organization.
• 2+ years of experience working with audit/regulatory frameworks as a Security subject matter expert.
• Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development.

LocationsAbout Meta Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics. Meta is committed to providing reasonable support (called accommodations) in our recruiting processes for candidates with disabilities, long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support. If you need support, please reach out to accommodations-ext@fb.com. $143,000/year to $208,000/year + bonus + equity + benefits

Individual pay is determined by skills, qualifications, experience, and location. Compensation details listed in this posting reflect the base salary only, and do not include bonus, equity or sales incentives, if applicable. In addition to base salary, Meta offers benefits. Learn more about benefits at Meta.