Security Engineer - Bug Bounty

Meta Security is looking for an Application Security Engineer with expertise in solving complex security problems at scale. You will join our Bug Bounty team and play a crucial role in growing the program by driving engineering projects and building tools to expand coverage, automate vulnerability triage and improve its effectiveness and efficiency. You will also be working with our analysts and security engineering teams to perform root cause analysis and security reviews to identify and address security issues.The Bug Bounty program incentivizes security researchers to search for, find and report security vulnerabilities across Meta's family of products, including Facebook, Instagram, WhatsApp and Quest. The program serves as the final level of protection per Meta’s Shift Left operating model, aiming to discover and resolve vulnerabilities that have landed in production and are at risk of being exploited, and acts as a feedback loop for other security efforts.

Security Engineer - Bug Bounty Responsibilities:

• Develop tools that aim to expand and improve the Bug Bounty program coverage across Meta’s products.
• Apply security-focused software engineering knowledge to automate large-scale program workflows.
• Perform root cause analysis and conduct proactive security reviews inspired by bug bounty reports.
• Provide technical security guidance to mitigate/prevent risks.
• Collaborate closely with our team of analysts and security engineering professionals to continuously improve the effectiveness and efficiency of the program.
  
  

Minimum Qualifications:

• B.S. or M.S. in Computer Science or related field, or equivalent experience
• 6+ years work experience writing code in Python, PHP, Java, Ruby, Go, Rust, C/C++ (or similar language)
• Deep technical understanding of application security vulnerabilities (OWASP Top 10) and mitigation techniques.
• Ambitious and results-oriented, with excellent communication skills.
  
  

Preferred Qualifications:

• Background in security-focused software engineering, designing large scale systems and data pipelines.
• Previous experience in bug bounty operations, application security, or related fields.
• Experience working with machine learning models to automate operational tasks.
  
  

About Meta:

Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics.