Security Engineering Manager - Surface Coverage, Detection Engineering at Meta

United States

Meta’s security team is the central engine driving data and system security. We work across all parts of the company, from corporate infrastructure to production to external services, interfacing with nearly every team in the company.<br/><br/>We are looking for a Security Engineering Manager with experience supporting teams of engineers who focus on threat modeling, TTP identification, and detection engineering securing Meta’s surfaces. You’ll support a team of security engineers who work alongside Software Engineers and Offensive Security Engineers to identify critical assets, assess the top risks, and evaluate potential attacks against Meta systems. You will be working across engineering teams supporting Meta’s Corporate, Cloud, and Production systems, serving over 3.2 billion daily active users, by supporting teams developing detection and response automation leveraging both industry-standard and custom detection and response platforms. Engineers on the Surface Coverage team generate detection ideas utilizing some of the world’s largest data sets and build on top of hyper-scale data pipelines.<br/><br/><strong>Responsibilities</strong><br/>Influence and align the organization’s vision and strategy, while engaging your team to develop and deliver specific, multi-year roadmaps, programs, and projects. Ensure prioritization, resourcing, and timely delivery of this work within a changing business environment<br/>* Measure the impact of your team and set clear expectations and goals<br/>* Partner with leadership to influence and drive org design, contribution and prioritization<br/>* Participate in technical design and strategy<br/>* Lead and guide engineering practices to sustain a high performance team<br/>* Integrate security in a constantly evolving environment where process is fluid and creative solutions are the norm<br/>* Build, cultivate, and maintain positive relationships with cross-functional partners to enable the team to effectively and efficiently execute on project work<br/>* Hire, grow, and build a high performing team to achieve the team’s mission<br/>* Work across partners in Product Management, Data Science, and Data Engineering to design and iterate on metrics and goals related to attack enumeration and detection coverage and validation<br/><br/><strong>Qualifications</strong><br/>BS in Computer Science or equivalent experience in Security<br/>* 8+ years of experience in Security or Software Engineering, including 3+ years of hands-on technical management in security engineering or security software engineering in product-driven environments<br/>* Proven track record of supporting security research, engineering, or other technical teams<br/>* Demonstrated experience in working across organizational boundaries to achieve company-wide impact<br/>* Experience leading and managing complex cross-functional programs<br/>* Experience designing systems used for responding to both external and insider threats<br/>* Knowledge of operating systems, file systems, and memory structures on Windows, MacOS and Linux<br/>* Scripting experience with an interpreted programming language (PHP, Python, Perl, Ruby, etc)<br/>* Experience with attacker tactics, techniques, and procedures and detection strategies<br/>* Broad knowledge across the security, systems design, offensive security, and detection engineering domains Expertise in one or more Security domains, experience with Public Cloud (AWS, GCP, Azure) and large scale containerized environments is a significant plus<br/>* Background in security-focused software engineering, designing large scale systems and data pipelines, or in offensive security<br/>* Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigates suspicious behavior across networks and systems<br/>* Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as log and events processing, Incident Management, Offensive Security, Detection and/or Response tooling development