Threat Intelligence Analyst

The Integrity, Investigations, and Intelligence (i3) teams at Meta are dedicated to protecting the users of our family of applications (e.g. Facebook, Instagram, WhatsApp, Oculus) from a multitude of threats including: criminal organizations, human trafficking and exploitation, and scams/fraud. We are seeking security analysts to investigate sophisticated threat actors, advance investigative methods, automate and mature team processes through tooling, and use innovative approaches to protecting people from offline harm. You will have the opportunity to work on some of the most challenging, complicated, and high-visibility risks the company is facing. We are seeking an experienced analyst with expertise in briefing, applying the intelligence cycle, working across a large set of stakeholders to implement change, anticipating how threats will evolve, and recommending innovative mitigations. The role will cover a range of adversarial behaviors, to include dangerous organizations and individuals, influence operations, non-state violent organizations, and other cyber-supported abuses. The ideal candidate will be an innovative self-starter, who is motivated by our mission and results-driven and will be able to extract, assimilate, and correlate a wide variety of data in order to surface, analyze, and disrupt threat actors across multiple spaces. Successful candidates must be comfortable with various technical investigative skills, proficiency in SQL preferred.

Threat Intelligence Analyst Responsibilities

• Investigate adversarial threat behaviors to understand how abuse manifests on Meta's platforms and the wider information ecosystem


• Lead a portfolio of investigative research to include identifying abuse trends, understanding adversarial behavior, and designing forward-looking enforcement strategies to mitigate harm


• Leverage geopolitical and societal context in the application of this work


• Proactively hunt for threats and undetected abuse by leveraging internal data sets, open-source intelligence, and third-party private intelligence


• Analyze qualitative and quantitative data to advance investigations, quantify trends and support findings with clear, concise evidence


• Take a leadership role in suggesting, prototyping, and teaching novel investigative techniques and analytic methodologies


• Apply operational rigor to investigations, analysis, and programs while looking for strategic improvement opportunities


• This role involves exposure to graphic and/or objectionable content including but not limited to graphic images, videos and writings, offensive or derogatory language, and other potential objectionable material, i.e. child exploitation, graphic violence, self-injury, animal abuse, and other content which may be considered offensive or disturbing

Minimum Qualifications

• 3+ years work experience performing security investigations in government, intelligence, cyber security, journalism and/or private sector organizations


• Experience leveraging SQL, OSINT, and network security concepts in an investigative context


• Adept at developing multi-source, evidence-based findings and communicating them to senior audiences


• Experience working on high-impact threats under compressed timelines


• Experience prioritizing and executing with minimal direction or oversight

Preferred Qualifications

• Experience working with Python, PHP, or similar scripting languages


• Proven experience conducting large scale data analysis and utilizing big data tools such as Jupyter Notebook, Maltego, Palantir, etc.


• Experience working or managing projects that have enterprise-wide impact and/or multi-organization cross functional stakeholders


• Experience working with a team spanning multiple locations/time zones


• Experience with open source investigation techniques and familiarity with a variety of internet research tools


• MS or equivalent experience in Computer Science, Information Systems, Intelligence Studies, Cybersecurity or related field