Meta is seeking a Privacy Engineer to join our Privacy Red Team, a specialized function dedicated to proactively identifying and exposing privacy risks across Meta's family of apps and services before they can impact the people who use our products. In this role, you will conduct adversarial privacy assessments, simulate real-world privacy attack scenarios, and drive systemic improvements to how Meta designs and builds privacy-protective systems. You will operate at the intersection of offensive security thinking and privacy engineering, partnering with product, legal, policy, and engineering teams to surface and remediate privacy vulnerabilities at scale. This is a high-impact, technically demanding role for an experienced privacy engineer who thinks like an adversary and builds like an engineer.
Qualifications:
8+ years of experience in privacy engineering, security engineering, or a related field with a focus on adversarial testing, vulnerability research, or privacy risk assessment Experience designing and executing privacy or security red team assessments, including threat modeling, attack simulation, and control validation across large-scale consumer products Experience identifying and exploiting privacy vulnerabilities such as re-identification risks, data minimization failures, unauthorized data access patterns, or consent and purpose limitation bypass Experience communicating technical privacy risk findings in written form to both engineering teams and non-technical leadership stakeholders Experience driving cross-functional remediation efforts and influencing engineering and product decisions through privacy risk analysis Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews) Experience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews) Experience developing automated tooling or testing pipelines to scale privacy red team assessments across large, distributed codebases Track record of defining and operationalizing privacy red team programs from early-stage development through organizational adoption Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Demonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements) Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologies Experience with data flow analysis, traffic inspection, or reverse engineering techniques applied to privacy control validation Familiarity with global privacy regulations and frameworks such as GDPR, CCPA, or ISO 29134, and experience applying them in an adversarial or audit context