Apply on Employer Site

Meta · 23 hours ago

Offensive Security Engineer, Purple Team

Washington, DC

Full-time

Onsite

Entry, Mid Level

$122K/yr - $181K/yr

2+ years exp

Meta's Offensive Security Group is seeking an experienced Offensive Security Engineer to join their team. The role involves executing tactical, offensive assessments, emulating threats, and driving remediations to enhance the organization's security posture.

Computer Software

Comp. & Benefits

Responsibilities

Conduct offensive security engagements, including Red Team operations, threat-based evaluations, and vulnerability research and exploitation against both internal and external facing systems

Design, scope, and lead complex technical assessments, Purple Team Engagements, and other security initiatives to test attack detection and prevention effectiveness

Automate portions of assessments, scoping, or other offensive security work to inform and drive our engagements

Incorporate Threat Intelligence research to track APT trends and help partners test their environments against new and emerging threats

Collaborate with cross-functional teams, including Incident Response, Product Security, and other security partners, to align remediation efforts and drive fixes after testing cycles

Develop and maintain relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work

Influence and align the team’s direction and strategy, and collaboratively prioritize and deliver specific multi-year roadmaps and projects

Qualification

Red TeamingPenetration TestingCyber Threat HuntingOffensive Security CertificationsCoding/Scripting Skills

Required

Bachelor's degree (or foreign degree equivalent) in Information Systems Engineering, Computer Science, Engineering, Information Security, Cyber Security, Information Assurance, or equivalent experience

2+ years of experience in Red Teaming, Penetration Testing, and/or cyber threat hunting

Experience with coding/scripting skills in one or more general purpose languages

Preferred

Relevant certifications such as Offensive Security Certified Professional, Offensive Security Exploitation Professional, Certified Red Team Operator, or Certified Red Team Leader

Public tools, presentations, or research published on Cybersecurity