{"id":3711799,"url":"https://alion.io/job/meta-security-engineer-incident-response-2","title":"Security Engineer, Incident Response","company":{"id":20,"name":"Meta","domain":"meta.com","url":"https://alion.io/company/meta","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career sitemap","truth_index":{"grade":"B","score":77,"open_postings":249,"ghost_share":0,"stale_share":0.924,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Context Engineering","optional":false},{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-12T18:17:27Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-11-06T09:54:38Z","board_verified":true,"closed_at":null,"days_open":24,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":24},"description":"Meta Security is looking for an Incident Response Engineer with experience coordinating, investigating and responding to internal and external threats. You will help the team establish, lead and execute multi-year roadmaps to mature investigative and response services, drawing upon automation and cross functional partnerships to create scalable and resilient operational capabilities.Responsibilities\nConduct security investigations and lead security incident response in a cross-functional environment and drive incident resolution Develop Incident Response initiatives that improve our capabilities to effectively respond and remediate security incidents Refine operational metrics, key performance indicators, and service level objectives to measure Security Operations and Incident Response services Influence and align the team’s vision and strategy. Collaboratively prioritize and deliver specific multi-year roadmaps and projects Build, cultivate, and maintain positive relationships with internal customers to identify and facilitate solutions to increase the impact of the team's work Partner with cross-functional teams to solve challenges related to a broad spectrum of detection and response initiatives Collaborate with software and production engineering teams to develop scalable and flexible Incident Response and Investigative solutions Focus on ruthlessly prioritizing, automating and scaling every aspect of our detection and response capabilities Coach and mentor team members to support their professional growth and long-term career development\nQualifications\n10+ years of work experience in Security Incident Response and Detection & Response Engineering in a large, regulated organization Be a technical and process subject matter expert regarding Security Operations and Incident Response services Experience developing and delivering information on incident and program status for leadership Experience leading and managing complex cross-functional programs Experience responding to both external and insider threats Experience analyzing network and host-based security events Knowledge of networking technologies, specifically TCP/IP and the related protocols Knowledge of operating systems, file systems, and memory structures on Windows, MacOS and Linux Coding/scripting experience in one or more general purpose languages Experience with attacker tactics, techniques, and procedures Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development Background in malware analysis, digital forensics, intrusion detection, and/or threat intelligence Experience recruiting, building, and leading technical teams, including performance management Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews) Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies Experience in threat hunting including leveraging intelligence data to proactively identify and iteratively investigate suspicious behavior across networks and systems Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)","description_format":"text","description_chars":3426,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Advertising","Digital Media","Foundation Models"],"lifecycle":[{"event":"open","at":"2026-11-03T23:32:59Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.618,"p_room":0.9,"age_days":24,"expected_fill_days":37,"reasons":["conf:0","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/meta-security-engineer-incident-response-2","json_url":"https://alion.io/job/meta-security-engineer-incident-response-2.json","meta":{"generated_at":"2026-11-06T12:46:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23267,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":20},"rest":"https://alion.io/mcp/rest/get_company?id=20"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmeta-security-engineer-incident-response-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmeta-security-engineer-incident-response-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmeta-security-engineer-incident-response-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/meta-security-engineer-incident-response-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmeta-security-engineer-incident-response-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3711799}},{"tool":"search_jobs","arguments":{"company":"meta.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3711799},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}