Roles & Responsibilities

Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us

At TikTok, our people are humble, intelligent, compassionate and creative. We create to inspire - for you, for us, and for more than 1 billion users on our platform. We lead with curiosity and aim for the highest, never shying away from taking calculated risks and embracing ambiguity as it comes. Here, the opportunities are limitless for those who dare to pursue bold ideas that exist just beyond the boundary of possibility. Join us and make impact happen with a career at TikTok.

About the team

PDPO(Privacy and Data Protection Office) is the organization to lead, supervise, and empower all TikTok's privacy work in an accountable and industry leading way. This team is the expert in the landscape of privacy risks and passionate about consulting across the company on implementing the proper safeguards and technical mitigations to ensure that our users’ privacy is honored across the TikTok's products and platforms.

Responsibilities

- Conduct technical assessments focused on finding privacy issues in internal and external facing systems, products and services

- Partner with Engineering teams to optimize SDLC testing

- Support the development of practices, processes, mechanisms, and the documentation for these activities, both internally and with working groups.

- Document and catalog privacy issues discovered during assessments

- Research new and novel tactics, techniques, and procedures that may be used to gain inappropriate access to user data

- Build tooling to automate portions of assessments

Qualifications

Minimum Qualification

- 5+ years experience in either Red Teaming, Penetration Testing, Vulnerability Research, or Application Security (conducting formal security reviews)

- 2+ years work experience in a role coding in Python, PHP, Java, C/C++ (or equivalent language) including code maintenance and review

- Experience translating technical concepts into language that is understood by software engineers, business and technical leaders

- Experience with common testing frameworks, such as the MITRE ATT&CK framework

- Experience with tools used to perform Dynamic Application Security Testing (DAST) or Static Application Security Testing (SAST)

- A strong understanding of core internet and networking technologies (e.g., TCP/IP, load balancing, authentication mechanisms, etc.)

- Relevant industry certifications (ISC2, ISACA, SANS/GIAC, CompTIA, AWS, GCP etc.)

Preferred Qualification

- Experience implementing or assessing the implementation of GDPR, CCPA, or equivalent privacy regulation

- Experience making contributions to the security or privacy community, such as public research, blogging, presentations, bug bounties, CVEs, etc.

- B.S. or M.S. in Computer Science or relevant certification

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Tell employers what skills you have

Tactics
Application Security
Vulnerability Research
PHP
Assessing
Blogging
Translating
SDLC
Penetration Testing
Networking
Python
GCP
Authentication
Consulting
Java