Application Security Engineer, Privacy

Meta's Privacy Engineering team is seeking a Security Engineer with experience in applying an adversarial mindset to identify, scope, contain, and eradicate real-world privacy threats to products and infrastructure. Your primary responsibilities will be to deal with privacy vulnerabilities by designing or guiding Software Engineers through remediations, learning from security/privacy incidents, identifying vulnerabilities in our codebase, and building agentic systems at scale to assist and perform these operations. Your skills will be the foundation of security initiatives that protect the security and privacy of billions of people. You will advance Meta’s mission of making the world more open and connected by identifying and neutralizing threats that aim to collect sensitive information or disrupt our systems.

Responsibilities

• Lead technical triage and investigation of complex privacy incidents - reviewing code, system architecture, logs, and other evidence to guide engineers through mitigation and remediation
• Design and build scalable agentic AI systems that can autonomously handle all aspects of incident response, discover and verify security/privacy vulnerabilities in product and infrastructure, and guide coding agents to write secure-by-default code
• Partner with engineering and product teams to improve designs, prioritize durable remediation, and shift privacy protections earlier in the development lifecycle
• Lead medium-to-large technical projects from ambiguous problem definition through implementation, adoption, measurement, and long-term ownership

Minimum qualifications

• 5+ years of work experience in technical privacy, security, or security software engineering domains, including incident response, application privacy/security, and/or offensive security
• Experience identifying, analyzing, and remediating real-world privacy/security threats
• Software engineering proficiency equivalent to 1+ years of work experience in coding in Python, PHP, Java, C/C++, (or an equivalent language), including code maintenance and review
• Experience with using AI coding tools and agents in helping to investigate or discover security/privacy issues

Preferred qualifications

• Experience mentoring engineers and creating documentation, training, tools, or processes that scale the people around you
• Experience improving the precision, coverage, reliability, or operational health of security or privacy systems
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
• Experience designing safeguards or frameworks that eliminate recurring classes of privacy or security issues
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience participating in or leading an incident-management oncall rotation
• Experience building AI agents or agent pipelines for code analysis, investigation, detection, verification, or remediation
• Experience with static or dynamic analysis, large-scale code search, data pipelines, or automated detection systems