Apply on Employer Site

Meta · 1 week ago

Security Analyst: Anti-Scraping Investigator

Menlo Park, CA

Full-time

Onsite

Senior Level

$137K/yr - $196K/yr

5+ years exp

Meta is seeking a Security Analyst to support the Anti-Scraping organization, focusing on investigating and analyzing adversarial behavior to improve user privacy. The role involves discovering, detecting, and responding to anti-scraping attacks, as well as collaborating with cross-functional teams to enhance security measures.

Computer Software

Comp. & Benefits

Responsibilities

Discover, detect, investigate, and respond to anti-scraping attacks targeting Meta’s products, including threat actor attribution and analysis. Document findings in detailed, concise, and comprehensive reports

Develop and execute technical solutions to proactively identify and mitigate scraping risks

Manage multiple simultaneous investigations, contribute to scaling the team, growing and supporting other investigators, and drive tooling and investigative technique improvements

Proactively look for currently undetected abuse by leveraging internal data, open-source intelligence, and cyber threat intelligence

Refine and track operational metrics, key performance indicators, and service level objectives to measure the effectiveness of anti-scraping efforts

Collaborate with cross-functional teams—including security engineers, analysts, policy, legal, and product partners—to address privacy and abuse challenges

Build and maintain collaborative relationships with internal stakeholders to maximize the impact of anti-scraping initiatives

Stay current on emerging scraping tactics, techniques, and procedures, and share insights with the broader security organization

Drive and lead exploration of the scraping ecosystem, understand the scraping enabled business models, and the most significant risks and harms of scraping to users

Qualification

Investigative experienceSQL queriesOSINT investigationsData analyticsIT security expertiseLinux/Unix exposureProgramming languagesAdversarial mindsetCommunication skillsSelf-motivated

Required

Bachelors Degree in Computer Science, Data Engineering, Cyber Security or related field or equivalent technical work experience

5+ years of investigative experience conducting technical and non-technical investigations of online threats and abuse

3+ years experience with complex SQL queries to drive analysis and insights

3+ years experience in leveraging intelligence in driving investigative and/or technical decision making

3+ years experience conducting OSINT and attribution investigations

Experience with network analysis

Preferred

Experience with all source intelligence analysis to drive decision making

Experience with, and exposure to, Linux/Unix environment, PHP, Python, Java, or other programming/scripting languages, TCP/IP protocol stack, and a variety of operating systems

Experience applying data analytics to security risk analysis and investigations

Adversarial experience and understanding how threat actors manifest on the internet

Experience summarizing and communicating technical data to a non-technical audience