Security Engineering Manager, Anti-Scraping

Security Engineering Manager, Anti-ScrapingMeta is seeking a Security Engineering Manager to lead our Anti-Scraping engineering team within the Privacy Engineering organization. Scraping poses a significant threat to user privacy, platform integrity, and data security across Meta's family of apps, and this team builds the detection systems, enforcement pipelines, and adversarial defenses that protect billions of users from unauthorized data collection. In this role, you will lead a team of engineers developing scalable anti-scraping infrastructure, working at the intersection of privacy engineering, threat detection, and abuse prevention.

You will partner closely with Privacy, Security, Legal, and Product teams to define strategy, drive technical roadmaps, and deliver systems that proactively identify and mitigate scraping threats at scale.ResponsibilitiesLead and develop a team of engineers building detection, enforcement, and mitigation systems to combat unauthorized data scraping across Meta's platformsDefine and drive the technical roadmap for anti-scraping infrastructure, balancing near-term threat response with long-term platform resiliencePartner with Privacy, Security, Legal, and Policy teams to align anti-scraping strategy with regulatory obligations and user privacy commitmentsOversee the design and operation of adversarial detection pipelines that identify scraping patterns across web, mobile, and API surfacesEstablish operational objectives and delegate work in ways that develop team members' skills in abuse detection, rate limiting, bot mitigation, and enforcement systemsEvaluate and communicate tradeoffs between detection coverage, false positive rates, and enforcement aggressiveness to leadership and cross-functional stakeholdersFoster a team culture of responsible and ethical use of AI and automation tools in building privacy-protective systemsActively monitor team performance, provide actionable feedback, and address performance gaps to maintain a high-performing engineering organizationRepresent the anti-scraping team in cross-functional forums, translating complex threat landscapes and technical approaches for non-technical audiences including legal and policy partnersIdentify and remove barriers that slow detection and enforcement cycles, including simplifying review processes and clarifying decision-making authority across dependent teamsQualifications8+ years of experience in security engineering, privacy engineering, abuse prevention, or a closely related technical domain4+ years of experience managing software or security engineering teams, including performance management and hiringExperience designing or operating systems for threat detection, bot mitigation, rate limiting, or abuse prevention at scaleExperience building cross-functional relationships and influencing technical and non-technical stakeholders on security or privacy strategyExperience communicating technical risk assessments and enforcement tradeoffs in written form to leadership and partner teamsBS in Computer Science or equivalent experience in Security Demonstrated ability to integrate AI tools to optimize detection workflows and drive measurable improvements in coverage or enforcement efficiencyDemonstrated ability to integrate AI tools to optimize/redesign workflows and drive measurable impact (e.g., efficiency gains, quality improvements)Experience applying machine learning or behavioral analytics to abuse detection or anomaly identification in large-scale production environmentsExperience adhering to and implementing responsible, ethical AI practices (e.g., risk assessment, bias mitigation, quality and accuracy reviews)Demonstrated ongoing AI skill development (e.g., prompt/context engineering, agent orchestration) and staying current with emerging AI technologiesExperience working within a privacy or regulatory compliance context, including familiarity with data protection frameworks relevant to unauthorized data collectionExperience with adversarial systems, including knowledge of scraping techniques, bot infrastructure, and evasion methods used by threat actors