[Remote] Security Engineer - Vulnerability Management
Note: The job is a remote job and is open to candidates in USA. Meta protects billions of people through technologies that help people connect, find communities, and grow businesses. The Security Engineer on the Scaling – Vulnerability Management team will build ML-based systems, autonomous remediation pipelines, and AI agents to identify, triage, and remediate vulnerabilities across Meta's codebase while developing supply-chain defenses for safe automated upgrades.
Responsibilities
- Design and build AI-powered autonomous remediation pipelines that detect and patch third-party library vulnerabilities across Meta's codebase, scaling from thousands to hundreds of thousands of packages
- Develop ML-driven triage and contextualization agents (e.g., Viper Assist, FixieAI) that autonomously assess, prioritize, and suppress vulnerability tasks with high precision — compressing remediation queues down to real, actionable risk
- Architect supply-chain defense systems, including time-locked package mirrors, quarantine mechanisms, and package decoration services that enrich dependency metadata for safer automated upgrades
- Drive cross-functional strategy across security, infrastructure, and product engineering teams, defining processes that enable multiple teams to operate at scale with automation
- Identify and solve ambiguous, open-ended problems where the solution is not initially known — owning technically complex workstreams while enabling others to execute
Skills
- Bachelor's degree in Computer Science, Information Security, or relevant field (or equivalent experience)
- 5+ years work experience securing enterprise-scale infrastructure software and services
- 3-5+ years programming experience with at least one of the following languages: Python, PHP, Ruby, or similar scripting languages
- Experience remediating infrastructure security gaps across broad corporate boundaries using influence and relationships
- Experience with security control automation/monitoring or “compliance as code” implementations
- Experience thinking critically and defending solutions with communication skills in a cross-functional setting to influence decision makers across all levels of technical background
- Experience identifying, triaging, and remediating software security vulnerabilities - including third-party/open-source dependency vulnerabilities across a large-scale codebase
- Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
- Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
- Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
Company Overview