About
Malya Jain is a Senior Security Engineer on Meta's Anti-Scraping Security team, where she leads adversarial red-teaming and vulnerability discovery across platforms used by billions of people. Her work centers on threat economics - measuring what it actually costs an adversary to harvest data at scale, and designing defenses that change that number. She authored Best Practices for Unauthorized Scraping Red-Teaming Exercises (2026), the first publicly available methodology of its kind, and presented on red-teaming at scale at USENIX Enigma 2026. Before Meta she held senior incident-response roles at Block and ServiceNow.
Sessions
Make It Unprofitable: Red-Teaming Anti-Scraping Defenses in Production at Scale
What you will learn:
Defenses are just assumptions until an adversary -- or your own red team -- tests them for real. This is a "show me, don't tell me" session: a repeatable red-team lifecycle for scraping, resilience scorecards (time-to-detect, time-to-enforce, evasion-success, account-survival), and a threat-economics model that measures success by the adversary's cost-per-record rather than vulnerability counts -- proving that a shipped fix isn't a validated fix. It maps directly to your Offense/Defense, Infrastructure Under Pressure, and Next Era of Security themes.