Job Description

Responsibilities
TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

At TikTok, our people are humble, intelligent, compassionate and creative. We create to inspire - for you, for us, and for more than 1 billion users on our platform. We lead with curiosity and aim for the highest, never shying away from taking calculated risks and embracing ambiguity as it comes. Here, the opportunities are limitless for those who dare to pursue bold ideas that exist just beyond the boundary of possibility. Join us and make impact happen with a career at TikTok.

Our Global Security function provides services to TikTok\'s global market using four principles that guide our strategic and tactical operations. First, we champion trust and transparency, leading the charge in organizational transparency and execution of security and privacy capabilities that drive customer trust. Second, we are a business catalyst and enabler, embodying the DNA of technical innovation. Third, we drive risk-informed and empowered decision-making, giving our business leaders the information needed to make key decisions. Finally, we proactively identify and reduce risk while enabling innovative product development \xe2\x80\x93 to consistently build sustainable world-class and trusted security capabilities.

We are seeking a Senior Digital Forensics Analyst to join our Forensics & Litigation Support team. The analyst will partner with internal stakeholders, such as Legal, HR, Ethics, Investigations, and Insider Threat, to support investigations and provide technical expertise. The role will perform forensic preservation of relevant devices and data, respond to incidents, and perform detailed analysis of systems and data. The role will require an individual able to apply forensics concepts and industry best-practice in the preservation and analysis of newly developed technologies engineered internally at the company.

Responsibilities

• Preserve network and host-based digital evidence in an industry accepted and forensically sound manner that would be admissible in court proceedings.
• Coordinate digital forensics analysis on large scale matters.
• Communicate technical events and analysis to both technical and non-technical audiences.
• Perform Apple macOS host-based forensics, including the analysis of user events, the APFS/HFS+ file system, internal services, default applications, and relevant logs.
• Perform Microsoft Windows host-based analysis using both Windows and Linux based forensic tools.
• Perform analysis of Linux servers, including user events, daemons, security logs, and cron jobs.
• Perform acquisitions and analysis of Apple iOS and Android mobile devices.
• Perform acquisitions and analysis of cloud platforms, such as Microsoft Azure, Amazon Web Services, Google Cloud Computing and/or others.
• Write detailed forensic reports for investigations.
• Maintain digital forensics equipment and lab environment.

Qualifications

• A bachelor\xe2\x80\x99s degree in a computing field.
• 5-8 years in digital forensics analysis experience.
• Holds an industry accepted certification validating digital forensics capabilities: GCIH, GCFA, GCFE, CFCE, GREM, X-PERT, EnCE, CCE, etc.
• In-depth understanding of computer forensic principles, including digital and mobile forensics, log analysis, cloud-based systems, database structures, querying languages and common digital forensics tools.
• Knowledge and experience of Windows, Unix and Mac host-based forensics, Mobile OS\xe2\x80\x99s and command line.
• Working knowledge of hardware configuration and network/data communications, software development and scripting, database technology and database exploitation/forensics.
• Experience with seizure of evidence, chain of custody and conducting analysis.
• Experience in writing affidavits, depositions and serving as an expert witness in court proceedings.
• Previous experience running and maintaining a Forensics lab
• Knowledge of data loss prevention systems and how they detect potential host and network-based data loss technologies or other insider threat risks.

Preferred Qualification:

• Completed the SANS course FOR518: Mac and iOS Forensic Analysis and Incident Response

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.