Job Description

Responsibilities
TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.
Why Join Us
At TikTok, our people are humble, intelligent, compassionate and creative. We create to inspire - for you, for us, and for more than 1 billion users on our platform. We lead with curiosity and aim for the highest, never shying away from taking calculated risks and embracing ambiguity as it comes. Here, the opportunities are limitless for those who dare to pursue bold ideas that exist just beyond the boundary of possibility. Join us and make impact happen with a career at TikTok.

The Global Security Organization provides industry leading security and privacy services to TikTok globally. Our organization uses four principles that guide our strategic and tactical operations. First, we champion trust and transparency, leading the charge in organizational transparency and execution of security and privacy capabilities that drive customer trust. Second, we are a business catalyst and enabler, embodying the DNA of technical innovation. Third, we drive risk informed and empowered decision making, giving our business leaders the information needed to make key decisions. Finally, we proactively identify and reduce risk while enabling innovative product development \xe2\x80\x93 to consistently build sustainable world-class security capabilities.

As a direct report to the Principal Security Operations Engineer within the Business Operations team, you will be a part of the Security Operations team responsible for Enterprise Defense Operations and Platform Management, Hosting Platform Defense Operations, and Global Security Technology Operations. The Security Operations team\'s primary focus is management of security and defense platforms, technologies, tools, and services supporting security controls across TikTok\'s environments. As the Global Security Operations Specialist, you will be responsible for supporting the Global Security Operations Lead in working with a team of cross-functional cyber, privacy, and data protection engineers, architects, and analysts to deploy, integrate, and manage, technologies to support the security and protection of data in accordance with relevant geographical regulations, contractual commitments, and confidentiality requirements.

Responsibilities:

• Build technical and functional requirements to configure and deploy tools that support the Global Security mission
• Develop standard operating procedures and trainings for each technology
• Architect and continuously improve security technology stack, process and procedures, support model and cross-function interactions
• Review and investigate alerts generated from Global Security tools and escalate as appropriate
• Review and assess utilization of Global Security tooling
• Promote and drive adoption of Global Security tooling across the enterprise
• Partner across the Security Operations team to respond to cybersecurity incidents
• Develop and report Global Security tool coverage metrics and remediation plans
• Maintain strong vendor relationships for Global Security tooling for continuous support
• Define procedures to validate the effectiveness of the design, deployment, and management of security controls that aim to maintain confidentiality, integrity, and availability of Global Security technology stack

Qualifications

Minimum Qualifications:

• Bachelors\xe2\x80\x99 Degree or industry equivalent work experience in cybersecurity, international security architecture, and/or engineering in a converged security program
• 3+ years applicable experience
• High degree of integrity and trustworthiness and the ability to lead and inspire change
• Demonstrate ability to quickly assimilate new knowledge and remain current on new developments in cybersecurity capabilities and industry knowledge
• In-depth experience in building and deploying security tools in any of the following security domains:
• Governance, Risk and Compliance (GRC)
• Digital Forensics
• Data Protection
• Access Management
• Threat Intelligence

Preferred Qualifications:

• CISSP, SSCP, CAP, CCSP, CISM, CSX-P or applicable experience in the Information Security field
• Experience using one or more programming/scripting languages (e.g., Python, Go, Java, etc.)
• Experience with infrastructure management across Windows and Linux hosting services
• Familiarity with source code management tools (e.g., Github, Bitbucket)
• Familiarity with securing data across SaaS and IaaS cloud platforms (e.g., AWS, Google Cloud Platform)
• Experience with deploying, managing and operating tools in the following areas:
• Data scanning
• Data loss prevention
• Privileged access management
• Federated authentication and authorization
• Forensics investigation
• Governance, risk and compliance (GRC)

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.