I had a phone screen interview yesterday for the Product Security Engineer - Native role at Meta. The interviewer was friendly and helpful.
The interviewer introduced himself and explained the process. The interview consisted of a code review and a coding round. I had previously asked the recruiter about the interview structure, and while they mentioned a coding round and questions about native security, a code review was not mentioned (despite my explicitly asking twice). Meta could benefit from creating interview preparation pages for security engineering roles, similar to those available for software engineering roles.
Code Review: The interviewer provided a large C++ code snippet and asked me to review it for vulnerabilities. I explained my limited experience with manual code review for vulnerabilities, as we typically use automated tools. Despite this, the interviewer asked me to proceed. With his guidance and after asking clarifying questions, I was able to address most of his concerns.
Coding Round: The coding question was Valid Palindrome, which I solved within 10 minutes. We then engaged in further discussion.
I received an update from my recruiter today; unfortunately, my application was rejected. However, there is no cooldown period, and I can apply for other roles at Meta.