Current jobs related to Security Engineer Investigator, Account Threats - London - Meta

  • Threat Investigator

    4 months ago


    London, United Kingdom Protection Group International Full time

    **PGI are looking for a Threat Investigator to join its Digital Investigations team.** PGI is a digital risk company focused on intelligence and cybersecurity. PGI’s Digital Investigations team leverage OSINT, SOCMINT, and WEBINT to provide contextual intelligence on state and nonstate threat actors to our clients. We currently have a growing team of 40...


  • London, Greater London, United Kingdom 55 Exec Search Full time

    Cyber Threat InvestigatorWe are seeking a highly skilled Cyber Threat Investigator to join our team at 55 Exec Search. As a Cyber Threat Investigator, you will be responsible for planning and managing the development, testing, and implementation of cutting-edge rules and analytics for SIEM and SOAR platforms.Key Responsibilities:Lead the development,...


  • London, Greater London, United Kingdom 55 Exec Search Full time

    Cyber Threat InvestigatorWe are seeking a highly skilled Cyber Threat Investigator to join our team at 55 Exec Search. As a Cyber Threat Investigator, you will be responsible for planning and managing the development, testing, and implementation of cutting-edge rules and analytics for SIEM and SOAR platforms.Key Responsibilities:Lead the development,...


  • London, Greater London, United Kingdom 55 Exec Search Full time

    Cyber Threat InvestigatorWe are seeking a highly skilled Cyber Threat Investigator to join our team at 55 Exec Search. As a Cyber Threat Investigator, you will be responsible for planning and managing the development, testing, and implementation of cutting-edge rules and analytics for SIEM and SOAR platforms.Key Responsibilities:Lead the development,...

  • Cyber Threat Investigator

    25 minutes ago


    London, Greater London, United Kingdom 55 Exec Search Full time

    Cyber Threat InvestigatorWe are seeking a highly skilled Cyber Threat Investigator to join our team at 55 Exec Search. As a Cyber Threat Investigator, you will be responsible for planning and managing the development, testing, and implementation of cutting-edge rules and analytics for SIEM and SOAR platforms.Key Responsibilities:Lead the development,...


  • London, Greater London, United Kingdom 55 Exec Search Full time

    Unlock Your Potential as a Cyber Threat InvestigatorOur client, a leading cyber security consulting firm, is seeking a highly skilled Cyber Threat Investigator to join their growing team. As a key member of the SOC Operations Team, you will play a critical role in planning and managing the development, testing, and implementation of cutting-edge rules and...


  • London, Greater London, United Kingdom Clearwater People Solutions Full time

    Cyber Security OpportunityClearwater People Solutions is seeking a Cyber Security Analyst to join our dynamic Security Operations team. This role is ideal for a detail-oriented professional with a passion for tackling technical security challenges and a proactive, offensive security mindset.Key Responsibilities for the Cyber Security Analyst:• Monitor...


  • London, Greater London, United Kingdom Clearwater People Solutions Full time

    Cyber Security OpportunityClearwater People Solutions is seeking a Cyber Security Analyst to join our dynamic Security Operations team. This role is ideal for a detail-oriented professional with a passion for tackling technical security challenges and a proactive, offensive security mindset.Key Responsibilities for the Cyber Security Analyst:• Monitor...


  • London, Greater London, United Kingdom Harnham Full time

    Job OverviewJob Title: Security AnalystContract Duration: 3-6 MonthsLocation: RemoteDay Rate: £300-£450 per dayThe Role:We are seeking a skilled Cybersecurity Specialist to join our team on a contract basis. In this role, you will play a critical part in monitoring, detecting, and responding to security incidents using Microsoft Sentinel. Your primary...


  • London, Greater London, United Kingdom 55 Exec Search Full time

    Job Title: Cyber Threat InvestigatorJob Summary:We are seeking a highly skilled Cyber Threat Investigator to join our team. As a Cyber Threat Investigator, you will play a pivotal role in enhancing our clients' security posture by collaborating closely with our SOC analysts. You will be responsible for leading the development, testing, and implementation of...


  • London, Greater London, United Kingdom 55 Exec Search Full time

    Job Title: Cyber Threat InvestigatorJob Summary:We are seeking a highly skilled Cyber Threat Investigator to join our team. As a Cyber Threat Investigator, you will play a pivotal role in enhancing our clients' security posture by collaborating closely with our SOC analysts. You will be responsible for leading the development, testing, and implementation of...


  • London, United Kingdom Facebook Full time

    The Integrity, Investigations, Intelligence and Events (i3E) teams at Meta are dedicated to protecting the users of our family of applications (e.g. Facebook, Instagram, WhatsApp, Oculus) from a multitude of threats including: criminal organizations, human trafficking and exploitation, and scams/fraud. We are seeking a security analyst - threat investigator...


  • London, Greater London, United Kingdom 55 Exec Search Full time

    About the RoleWe are seeking a highly skilled Cyber Threat Investigator to join our team at 55 Exec Search. As a Cyber Threat Investigator, you will play a pivotal role in enhancing our clients' security posture by collaborating closely with our SOC analysts.Key ResponsibilitiesDevelop and implement cutting-edge rules and analytics for SIEM and SOAR...


  • London, Greater London, United Kingdom 55 Exec Search Full time

    About the RoleWe are seeking a highly skilled Cyber Threat Investigator to join our team at 55 Exec Search. As a Cyber Threat Investigator, you will play a pivotal role in enhancing our clients' security posture by collaborating closely with our SOC analysts.Key ResponsibilitiesDevelop and implement cutting-edge rules and analytics for SIEM and SOAR...


  • London, Greater London, United Kingdom Trustwave Full time

    Cyber Threat Engineer - Global Threat Operations**Job Summary**A Cyber Threat Engineer is a key member of the Threat Detection and Response (TDR) team within Trustwave Managed Security Services (MSS). This team acts as the monitoring and response extension of a Digital Forensics and Incident Response Services (DFIR) team to provide 24/7 monitoring. In...


  • London, Greater London, United Kingdom Trustwave Full time

    Cyber Threat Engineer - Global Threat Operations**Job Summary**A Cyber Threat Engineer is a key member of the Threat Detection and Response (TDR) team within Trustwave Managed Security Services (MSS). This team acts as the monitoring and response extension of a Digital Forensics and Incident Response Services (DFIR) team to provide 24/7 monitoring. In...


  • London, United Kingdom 55 Exec Search Full time

    Cyber Threat Investigator - Sentinel Please read the information in this job post thoroughly to understand exactly what is expected of potential candidates.Our client is a pure-play cyber security consulting firm, due to a recent M&A and continued growth they are looking for a technical and driven Cyber Threat Investigator to join the growing team.You will...


  • London, United Kingdom 55 Exec Search Full time

    Cyber Threat Investigator - Sentinel Please read the information in this job post thoroughly to understand exactly what is expected of potential candidates.Our client is a pure-play cyber security consulting firm, due to a recent M&A and continued growth they are looking for a technical and driven Cyber Threat Investigator to join the growing team.You will...


  • London, United Kingdom 55 Exec Search Full time

    Cyber Threat Investigator - Sentinel Our client is a pure-play cyber security consulting firm, due to a recent M&A and continued growth they are looking for a technical and driven Cyber Threat Investigator to join the growing team.You will collaborate closely with the SOC analysts, ensuring clients’ security posture is enhanced. As a Cyber Threat...


  • london, United Kingdom 55 Exec Search Full time

    Job DescriptionCyber Threat Investigator - Sentinel Our client is a pure-play cyber security consulting firm, due to a recent M&A and continued growth they are looking for a technical and driven Cyber Threat Investigator to join the growing team.You will collaborate closely with the SOC analysts, ensuring clients’ security posture is enhanced. As a Cyber...

Security Engineer Investigator, Account Threats

4 months ago


London, United Kingdom Meta Full time
Security Engineer Investigator, Account Threats

The Account Threats team is dedicated to protecting the users of Meta’s family of applications (e.g. Facebook, Instagram, WhatsApp, Oculus) from the worst kinds of account security issues we experience. You will have the opportunity to work on some of the most challenging, complicated, and high-visibility security risks the company is facing through an account security lens. The impact of your work will be substantial, as outcomes could affect the billions of people who use our products.

We are seeking an experienced security engineer to proactively detect and analyze root causes of account security abuses, reverse engineer novel malware or other malicious software, investigate complex threats to our business and our users, advance investigative methods, conduct data-driven decision making, and use innovative approaches to protect people from harm. The candidate must have a strong cybersecurity or cyber threat intelligence background and know how to apply it to proactively hunt for threats, be able to use code to automate investigative actions, and be proficient in scripting languages, such as PHP or Python.

The ideal candidate will be an innovative self-starter, who is motivated by our mission, is results-driven, a strategic thinker, and will be able to extract, assimilate, and correlate a wide variety of data in order to surface and disrupt account security abuses.Security Engineer Investigator, Account Threats Responsibilities
  • Proactively hunt for threats and undetected abuse by leveraging internal data, open source intelligence, and third-party private intelligence.
  • Investigate complex account security abuses to understand in granular detail how abuse is occurring. Identify and implement appropriate detection or prevention strategies to mitigate harm both in the current case and from similar forward-looking abuse.
  • Understand the application of tactics, techniques, and procedures, as well as tooling, that actors use across various attack surfaces.
  • Reverse engineer malware and other potentially malicious software interacting with Meta platforms or users to derive behaviors indicative of abusive interactions with our platforms.
  • Write signatures (e.g. file, network) to detect, hunt, and prevent malware compromise.
  • Lead technical investigations from start-to-finish, to include effectively communicating actionable results, analytic judgments, and mitigations to different audience types across cross-functional settings.
  • Self-directed identification of trends in adversary behavior, and proactive surfacing of risks that may represent previously unidentified or novel vectors for harm. Deeply understand how abuse manifests and clearly explain emerging threats and trends, with an emphasis on security understanding.
  • Analyze and interpret complex, high volume, and high dimensionality data from varying sources to advance investigations, quantify trends, or support findings.
  • Take a leadership role in suggesting, prototyping, and teaching novel investigative techniques.
  • Partner with other cross-functional teams to identify, influence, and implement holistic solutions to surfacing and responding to emerging threats.
  • Manage multiple projects at once while effectively prioritizing time, based on team priorities.
  • Automate the everyday tasks and actions conducted during investigations and team processes.
Minimum Qualifications
  • 5+ years work experience in a cyber security, security investigations, or cyber threat intelligence investigations role.
  • Adept at writing queries to analyze and interpret large datasets to advance investigations, quantify trends or support findings.
  • Experience investigating and acting on high-impact threats such as account compromise, account creation abuse, business compromise, or malware analysis.
  • Proficiency in reverse engineering and familiarity with Android or Windows reverse engineering tools (e.g. JEB, IDAPro, or Ghidra), to include familiarity with machine code in at least one of the preferred architectures (x86/64, ARM/AArch64).
  • Proficiency in static and dynamic analysis of malicious software to understand behaviors and intent of the malicious software. Experience should include leveraging results to create malware detection rules (e.g. Yara) and hunting for malware.
  • Proficiency working with Python, PHP, or similar scripting languages.
  • Experience thinking critically and qualifying assessments with solid communications skills in a cross-functional setting to influence decision makers across all levels of technical background.
  • Experience identifying effective strategies to prevent or disrupt abuse at scale. Consult on the design of countermeasures to affect those strategies.
Preferred Qualifications
  • Experience working with a team spanning multiple locations/time zones.
  • Proficiency in detecting and mitigating account abuse for a Web-based service, to include experience with authentication attacks, account generation abuse, bot detection, evasion detection, and/or browser fingerprint analysis.
  • 3+ years of red or purple teaming exposure.
  • Deep technical and data analysis ability to analyze custom protocols to understand and expose adversarial behaviors.
  • Experience with sizing abuses / threats to a Web-based service.
  • Experience understanding tactics, techniques, and procedures (TTPs) and actor intent, including extracting this from malware.
  • Experience in scoping, communicating, and leveraging cyber threat intelligence to proactively detect, measure, or prevent abuse.
  • Experiencing tracking highest priority malware campaigns.
  • Expertise with multiple malware file formats.
  • Experience using SQL for data analytics and processing large data sets.
  • Demonstrated passion for understanding the intersection of global security risks, and how they apply to social media.
  • Experience with open source investigation techniques and familiarity with a variety of internet research tools.
  • BS/MS or equivalent experience in Computer Science, Information Systems, Intelligence Studies, Cybersecurity or related field.
  • Experience working across or contributing to the broader security community (public research, blogging, presentations, open source contributions, etc.)
LocationsAbout Meta Meta builds technologies that help people connect, find communities, and grow businesses. When Facebook launched in 2004, it changed the way people connect. Apps like Messenger, Instagram and WhatsApp further empowered billions around the world. Now, Meta is moving beyond 2D screens toward immersive experiences like augmented and virtual reality to help build the next evolution in social technology. People who choose to build their careers by building with us at Meta help shape a future that will take us beyond what digital connection makes possible today—beyond the constraints of screens, the limits of distance, and even the rules of physics. Meta is committed to providing reasonable support (called accommodations) in our recruiting processes for candidates with disabilities, long term conditions, mental health conditions or sincerely held religious beliefs, or who are neurodivergent or require pregnancy-related support. If you need support, please reach out to accommodations-ext@fb.com . Explore more InfoSec / Cybersecurity career opportunities

Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.

#J-18808-Ljbffr