Product Security Engineer, Intern (Summer 2027)

Meta's Product Security team focuses on detection, prevention, and mitigation of risk that is inherent in building software through an AI-first lens -- leveraging machine learning, automation, and intelligent systems to revolutionize how we approach vulnerability research and secure software development. Product Security Engineers partner with their engineering and product teams to provide and develop AI-enhanced guidance and tooling that help minimize security and privacy risk for over 3 billion of our users. The scale, diversity, and importance of the products we secure demands an innovative, AI-driven approach -- come help us make life hard for the bad guys using cutting-edge AI!

Meta’s Product Security team is hiring Security Interns focused in the following areas:

Web Security: focused on securing web applications/APIs and ensuring we have robust architectural browser protections. Web Security Engineers on Product Security team work on a wide range of projects in PHP, Python, Perl, Ruby, etc.

Native Security: focused on securing the C, C++, and Rust code at the core of Meta's apps, servers, and devices, media and file parsers, end-to-end encrypted messaging, real-time calling, and the native libraries shared across billions of installs. Native Security Engineers on the Product Security team use AI agents and fuzzing to find and reproduce memory-safety vulnerabilities at scale, harden products with exploit mitigations such as sandboxing, hardware memory tagging, and control-flow integrity, and drive adoption of memory-safe languages like Rust.

Responsibilities

AI-Enhanced Security Reviews: perform manual design and implementation reviews augmented by AI tools for products and services that make up the Meta ecosystem, like Instagram, WhatsApp, Facebook, and more. AI-Driven Automated Analysis and Secure Frameworks: build tools leveraging machine learning models for security automation (static and dynamic analysis) and intelligent frameworks that enable Meta to scale security consistently across all products. AI-Assisted Research and Mitigation: research, develop, and apply mitigations to products using LLMs and other ML tech to identify and prevent vulnerabilities from being exploited. Security AI Enhancement: contribute to the fine-tuning of AI agents, specifically designed for security use cases, threat detection, and vulnerability assessment.

Qualifications

Currently enrolled in a full-time, degree-seeking program and in the process of obtaining a Bachelors or Masters degree in computer science or a related field Experience with exploiting common web security vulnerabilities Experience finding vulnerabilities in code (PHP, Ruby, Python, Java, Kotlin, Swift, Objective-C). Knowledge of secure code development Proven project management and execution skills Self-motivated and proactive, with ability to identify key areas of focus and take initiative to drive results Demonstrated ability to communicate clearly and effectively across diverse teams and stakeholders, fostering collaboration to achieve shared goals Must obtain work authorization in the country of employment at the time of hire and maintain ongoing work authorization during employment Experience writing software that enables security processes with integration of AI/ML capabilities Hands-on experience with machine learning frameworks (TensorFlow, PyTorch, etc.) applied to security problems Experience with AI-powered security tools, automated penetration testing, or intelligent threat detection systems Contributions to the security community (public research, blogging, presentation, open source, etc.) particularly around AI in cybersecurity Coursework or projects involving AI/ML applications in cybersecurity, anomaly detection, or automated vulnerability discovery Intent to return to full-time degree program after completion of the internship