Enterprise Application Security Engineer (Builder)

Meta’s Enterprise Application Security team is seeking an Enterprise Application Security Engineer (Builder) to create and strengthen security tooling, automation, and frameworks that help enterprise teams deliver secure applications and services at scale. The position focuses on shifting security detection and prevention earlier in the development lifecycle and establishing guardrails for safe adoption of third-party AI applications and agentic workflows.

Responsibilities

• Conceive, design, develop, and continuously improve security tooling, automation, and/or frameworks that help enterprise teams deliver applications and services with security controls aligned to evolving security, privacy, and data protection requirements.
• Identify and eliminate recurring classes of security problems by shifting detection and prevention left into the development workflow.
• Provide just-in-time, technical security guidance to enterprise application and service teams through code reviews, penetration tests, adversarial testing, threat modeling, architecture design reviews, and other security activities.
• Partner with cross-functional teams to ensure security priorities are surfaced and addressed.
• Design and build security controls and guardrails that enable safe adoption of third-party AI applications and agentic workflows across the enterprise, including controls that define what automated systems can access and what data they can reach.
• Protect sensitive and highly confidential data in enterprise applications by building enforcement mechanisms that operate continuously and at scale.

Requirements

• B.S. or M.S. in Computer Science, Engineering, or a related technical discipline, or equivalent experience.
• 2+ years of professional experience developing production-level code in Python, PHP, Java, Ruby, Go, Rust, C/C++, or a similar language.
• 2+ years of professional experience identifying and mitigating security issues in software (using Python, PHP, Java, Ruby, Go, Rust, C/C++, or similar) and knowledge of best-practice secure coding.
• Experience owning a component, feature, or system.
• Experience building and securing enterprise-scale software, services, and infrastructure.
• Ability to communicate technical security findings and recommendations in writing to both technical and non-technical stakeholders.

Technologies

• Python
• PHP
• Java
• Ruby
• Go
• Rust
• C/C++

Location

New York, NY (onsite)

Compensation

USD 122,000 - 181,000 per year + bonus + equity + benefits

Benefits

Meta offers benefits.

Preferred Qualifications

• Experience developing software that enables or evaluates security controls in complex systems.
• Demonstrated ability to integrate AI tools to optimize or redesign workflows and drive measurable impact, such as efficiency gains and quality improvements.
• Demonstrated ongoing AI skill development (for example, prompt/context engineering and agent orchestration) and staying current with emerging AI technologies.
• Experience fixing enterprise security problems across broad corporate boundaries through influence and relationships.
• Experience designing, analyzing, and conducting threat model assessments of enterprise software and services.
• Experience with penetration testing or red team operations.
• Contributions to the security community, such as public research, blogging, presentations, or bug bounty participation.
• Experience automating application security controls in large-scale enterprise environments.
• Experience adhering to and implementing responsible, ethical AI practices, including risk assessment, bias mitigation, and quality and accuracy reviews.
• Broad knowledge of the security domain, which may include security investigations, incident management, digital forensics, offensive security, vulnerability management, application security, and other security disciplines.