Security Engineering Manager, Security Operations & Incident Response

We are looking for a Security Engineering Manager with experience supporting teams of engineers and analysts who focus on the identification, investigation, containment, and mitigation of security incidents. The manager will be part of the Global Security Operations and Incident Response team and will be working alongside cross-functional partners to protect the company from internal and external threats as well as enabling the team to continuously scale security operations and response capabilities and services. You will support and help grow a team of investigators and responders, help set long term, sustainable and resilient multi-year roadmaps and grow the team's service portfolio while driving strategic initiatives to mature the capabilities of the team to scale across Meta's infrastructure.

Responsibilities

Support a team of security engineers and analysts who hunt, detect, and respond to internal and external threats. Influence and align the organization's vision and strategy, while engaging the team to develop and deliver specific, multi-year roadmaps, programs, and projects. Ensure prioritization, resourcing, and timely delivery of project work within a changing business environment. Define operational metrics, key performance indicators, and service level objectives to assure the team achieves operational excellence across Security Operations, Incident Response and Investigation services. Hire, grow, and build a team capable of meeting defined goals and delivering measurable outcomes capable of achieving the team's mission. Coach, mentor, support, and care for the team in a way that enables long-term career development, happiness, and success at scale. Work with, partner, and influence other teams to develop engineering solutions designed to mitigate security risks and automate investigative and operational workloads. Build, cultivate, and maintain positive relationships with cross-functional partners to enable the team's ability to effectively and efficiently execute on the service portfolio. Apply broad technical and process expertise across Security Operations and Incident Response domains to guide team decisions, inform strategy, and resolve complex issues. Collaborate with a wide range of cross-functional partners and teams to develop scalable and flexible investigative and incident response services. Focus on ruthlessly prioritizing, automating, and scaling every aspect of our Security Operations and Incident Response capabilities.

Qualifications

10+ years of work experience in Security Operations, Incident Response and Investigations, including 2+ years of proven hands-on technical management experience of security engineers and analysts Experience recruiting, building, and leading technical teams, including performance management Experience developing and delivering information on program status and security incidents for senior leadership Experience leading and managing complex multi-year cross-functional programs Knowledge of operating systems, file systems, and memory on Windows, MacOS, or Linux Experience with an interpreted programming language (PHP, Python, Perl, Ruby, etc.) Experience with attacker tactics, techniques and procedures Experience working across security, risk management, and compliance domains BA/BS in Computer Science or equivalent experience in security Background in intrusion detection, security investigations, insider threats or digital forensics Previous experience as a Lead security incident response engineer in a large, global and regulated organization Broad knowledge across the Security domain, as well as deep focus in one (or more) areas such as Logs and events processing, Incident Management, Digital Forensics, Detection and/or response tool development Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews) Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies