Security Engineer - Vulnerability Management

Meta protects billions of people through technologies that help people connect, find communities, and grow businesses. The Security Engineer on the Scaling – Vulnerability Management team will build ML-based systems, autonomous remediation pipelines, and AI agents to identify, triage, and remediate vulnerabilities across Meta's codebase while developing supply-chain defenses for safe automated upgrades.

Responsibilities:

• Design and build AI-powered autonomous remediation pipelines that detect and patch third-party library vulnerabilities across Meta's codebase, scaling from thousands to hundreds of thousands of packages
• Develop ML-driven triage and contextualization agents (e.g., Viper Assist, FixieAI) that autonomously assess, prioritize, and suppress vulnerability tasks with high precision — compressing remediation queues down to real, actionable risk
• Architect supply-chain defense systems, including time-locked package mirrors, quarantine mechanisms, and package decoration services that enrich dependency metadata for safer automated upgrades
• Drive cross-functional strategy across security, infrastructure, and product engineering teams, defining processes that enable multiple teams to operate at scale with automation
• Identify and solve ambiguous, open-ended problems where the solution is not initially known — owning technically complex workstreams while enabling others to execute

Requirements:

• Bachelor's degree in Computer Science, Information Security, or relevant field (or equivalent experience)
• 5+ years work experience securing enterprise-scale infrastructure software and services
• 3-5+ years programming experience with at least one of the following languages: Python, PHP, Ruby, or similar scripting languages
• Experience remediating infrastructure security gaps across broad corporate boundaries using influence and relationships
• Experience with security control automation/monitoring or “compliance as code” implementations
• Experience thinking critically and defending solutions with communication skills in a cross-functional setting to influence decision makers across all levels of technical background
• Experience identifying, triaging, and remediating software security vulnerabilities - including third-party/open-source dependency vulnerabilities across a large-scale codebase
• Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
• Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
• Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies