Product Security Engineer, Technical Lead - Native

Meta; Salem (OR); On-site; USD 177,000 - 251,000; Full time

Job summary

A leading tech company in Salem, Oregon, is seeking an experienced hacker to join its Product Security team. This role focuses on identifying vulnerabilities in products like Instagram and WhatsApp while offering solutions to enhance security. Ideal candidates should possess a strong background in security, with at least 8 years of experience. The position offers a competitive salary range from $177,000 to $251,000 per year, along with bonuses and equity.

Qualifications

• 8+ years of experience finding vulnerabilities in interpreted languages.
• Knowledge of exploitable security vulnerabilities and mitigations.
• Contributions to the security community appreciated.

Responsibilities

• Perform manual design and implementation reviews of products.
• Provide guidance to developers to prevent vulnerabilities.
• Build automated analysis frameworks with software engineers.

Skills

Finding vulnerabilities

Securing code development

Conducting security reviews

Coding and scripting in general-purpose languages

Education

BS or MS in Computer Science or related field

Job description

Overview

Summary: Meta's Product Security team is seeking a experienced hacker who derives purpose in life by revealing potential weaknesses and then crafting creative solutions to eliminate those weaknesses. Your skills will be the foundation of security initiatives that protect the security and privacy of over two billion people. You will be relied upon to provide engineering and product teams with the web, mobile, or native code security expertise necessary to make informed product decisions. Come help us make life hard for the bad guys.

Responsibilities

1. Security Reviews: perform manual design and implementation reviews of products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Oculus, Portal, and more

2. Developer Guidance: provide guidance and education to developers that help prevent the authoring of vulnerabilities

3. Automated Analysis and Secure Frameworks: build automation (static and dynamic analysis) and frameworks with software engineers that enable Meta to scale consistently across all of our products

Minimum Qualifications

1. BS or MS in Computer Science or a related field, or equivalent experience

2. 8+ years of experience finding vulnerabilities in interpreted languages. Knowledge of best practice secure code development

3. Experience with exploiting common security vulnerabilities

4. Knowledge of common exploit mitigations and how they work

5. Coding and scripting experience in one or more general purpose languages

Preferred Qualifications

1. 8+ years of experience finding security vulnerabilities and knowledge of secure code development in C, C++

2. Contributions to the security community (public research, blogging, presentations, bug bounty, etc.)

3. Experience creating software that enables security processes

Public Compensation

$177,000/year to $251,000/year + bonus + equity + benefits

Industry

Internet

Equal Opportunity

Meta is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender, gender identity, gender expression, transgender status, sexual stereotypes, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. We also consider qualified applicants with criminal histories, consistent with applicable federal, state and local law. Meta participates in the E-Verify program in certain locations, as required by law. Please note that Meta may leverage artificial intelligence and machine learning technologies in connection with applications for employment.

Meta is committed to providing reasonable accommodations for candidates with disabilities in our recruiting process. If you need any assistance or accommodations due to a disability, please let us know at [e-mail].