> Markdown version of [/jobs/ext/2992444-detection-response-security-engineer-threat-intelligence](https://www.wearedevelopers.com/jobs/ext/2992444-detection-response-security-engineer-threat-intelligence). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Detection & Response Security Engineer, Threat Intelligence

- **Company:** Meta
- **Location:** London, UK
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** PHP (Programming Language), Artificial Intelligence, Big Data, Query Languages, Data Intelligence, Python (Programming Language), Network Forensics, Red Team (Cyber Security), SQL Databases, Software Vulnerability Management, Snort (Software), Scripting, Mitre Att&ck, Malware, Cyber Threat Analysis, Cybercrime, Production Code
- **Published:** September 19, 2026
- **Apply:** https://dejobs.org/x/x/124D39089AB548BA83E8DCD75D3C165E/job/

## About the Role

6. 3+ years threat intelligence experience
 7. Familiarity with campaign tracking techniques and ability to convert the tracking results to long term countermeasures
 8. Familiarity with threat modeling framework, such as Diamond Model and/or MITRE ATT&CK framework
 9. Experience intelligence-driven hunting to spot suspicious activities in the network and identify potential risks
 10. Proven track record of managing and executing on short term and long term projects
 11. Ability to work with a team spanning multiple locations/time zones
 12. Ability to prioritize and execute tasks with minimal direction or oversight
 13. Ability to think critically and qualify assessments with solid communications skills
 14. Coding or scripting experience in one or more scripting languages such as Python or PHP, 15. Familiarity with malware analysis or network traffic analysis
 16. Experience authoring production code for threat intelligence tooling
 17. Experience conducting large scale data analysis
 18. Experience in one or more query languages such as SQL
 19. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
 20. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
 21. Experience working across the broader security community
 22. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
 23. Production of file-based or network-based rules and signatures for detection and tracking of complex threats, such as YARA or Snort
 24. Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)
 25. Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)
 26. Experience closely collaborating with incident responders on incident investigations
 27. Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies
 28. Familiarity with nation-state, sophisticated criminal, or supply chain threats

## Description

Meta Security is looking for a threat intelligence investigator with extensive experience in investigating cyber threats with an intelligence-driven approach. You will be proactively responding to a broad set of security threats, as well as tracking actor groups with an interest or capability to target Meta and its employees. You will also be identifying the gaps in current detections and preventions by long-term intelligence tracking and research, and working with cross-functional stakeholders to improve Meta's security posture., Detection & Response Security Engineer, Threat Intelligence Responsibilities:

 1. Track threat clusters posing threats to Meta's infrastructure and employees, and identify, develop and implement countermeasures on our corporate network
 2. Investigate, mitigate, and forecast emerging technical trends and communicate effectively with actionable suggestions to different types of audiences
 3. Work closely with incident responders to provide useful and timely intelligence to enrich ongoing investigations
 4. Improve the tooling of threat cluster tracking and intelligence data integration to existing systems
 5. Engage constructively in cross-functional projects to improve the security posture of Meta's infrastructure, such as red team operations, surface detection coverage expansion and vulnerability management discussions


## Related Videos

- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)
- [The AI Security Survival Guide: Practical Advice for Stressed-Out Developers](https://www.wearedevelopers.com/videos/1015-the-ai-security-survival-guide-practical-advice-for-stressed-out-developers)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift)