Offensive Security Engineer, Red Team Operations Group
Meta

Meta Security is looking for an Offensive Security Engineer with experience coordinating, executing, and driving remediations for offensive security engagements emulating internal and external threats. You will help the team establish, lead, and execute multi-year roadmaps to mature security within WhatsApp Infrastructure, drawing upon cross functional partnerships to deliver security posture reviews on a repeatable basis and review new infrastructure as it's built.

Offensive Security Engineer, Red Team Operations Group Responsibilities:

• Conduct offensive security engagements and lead red team operations in a cross-functional environment and drive finding remediations.
• Collaborate with the different teams within the Offensive Security Group, Detection and Response organization, and Product Security Group to develop and offer holistic offensive security solutions.
• Develop Offensive Security initiatives that improve our capabilities to effectively emulate adversaries to improve the organization's prevention, detection, response, and threat hunting capabilities.
• Refine operational metrics, key performance indicators, and service level objectives to measure Red Team services.
• Influence and align the team's vision and strategy. Collaboratively prioritize and deliver specific multi-year roadmaps and projects.
• Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work.
• Partner with cross-functional teams to solve challenges related to a broad spectrum of security initiatives.
• Coach, mentor, support and care for the team in a way that enables long-term career development, happiness and success at scale.

Minimum Qualifications:

• 10+ years of work experience in Red Teaming and Offensive Security in a large, regulated organization.
• Be a technical and process subject matter expert regarding Red Teaming and Offensive Security services, and attacker tactics, techniques, and procedures.
• Experience developing and delivering information on offensive engagements and program status for leadership.
• Experience working with public threat intelligence reporting and internal threat intelligence teams to create and adapt offensive security offerings to improve security programs of all maturity levels in a large organization.
• Experience leading and managing complex cross-functional programs and teams.
• Experience emulating both external and insider threats.
• Experience bypassing network and host-based security controls.
• Knowledge of networking technologies, specifically TCP/IP and the related protocols.
• Knowledge of operating systems, file systems, and memory structures on Windows, MacOS and Linux.
• Coding and scripting experience in one or more general purpose languages.
• Bachelor's degree (or foreign degree equivalent) in Information Systems Engineering, Computer Science, Engineering, Information Security, Cyber Security, Information Assurance, or related field.

Preferred Qualifications:

• Experience in coding and breaking Erlang or other functional programming language systems.
• Experience in code and infrastructure security reviews and threat modeling.
• Experience attacking messaging, distributed, and/or p2p systems.
• Broad knowledge across the Security domain, as well as demonstrated focus in adversary emulation and in one (or more) areas of Offensive Security such as Red Teaming, Purple Teaming, Vulnerability Research and Exploitation.
• Experience recruiting, building, and leading technical teams, including performance management.
• Master's degree (or foreign degree equivalent) in Information Systems Engineering, Computer Science, Engineering, Information Security, Cyber Security, Information Assurance, or related field.

About Meta: