Security Engineer

Position:
Security Engineer, Product Security - Global Security Organization

Company:
TikTok

Location:
Singapore

Employment Type:
Regular

Short Summary:
The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. As a security engineer on the vulnerability management team, you will manage product security incidents, develop internal security initiatives, gather intelligence, investigate, and validate reported vulnerabilities.

Responsibilities:
- Strategic Problem Solving & Automation: Analyze complex security issues, develop clear and practical solutions, execute tasks with meticulous attention to detail, and develop automated solutions and scripts to enhance security processes.
- Vulnerability Impact Analysis: Analyze CVEs and associated public exploit code to determine their practical implications and potential risk to the operational environment.
- Own the Vulnerability Lifecycle: Identify, analyze, document, and coordinate the remediation of security weaknesses and potential attack methods in code and systems.
- Incident Response & Mitigation: Manage and respond to cybersecurity incidents, pinpointing affected systems and clearly outlining risks and exposures.
- External Collaboration & Communication: Engage with external security experts and communicate complex technical information effectively to diverse audiences.
- Program Effectiveness & Disclosure: Utilize data to measure security program effectiveness and coordinate the responsible disclosure of vulnerabilities.
- Vulnerability Scanning Operations: Operate and manage vulnerability scanning platforms, interpreting results to identify and prioritize security issues.

Requirement:
- Minimum of 3 years of professional experience in product security, cybersecurity, or a related field.
- Practical experience in utilizing Artificial Intelligence (AI) technologies or participating in AI-related development, especially applied to security workflows or automation.
- Experience in developing tools and systems to automate security processes.
- Proven experience in identifying and understanding security weaknesses, including how they can be exploited, with a thorough understanding of common vulnerabilities like the OWASP Top 10.
- Experience with managing and responding to cybersecurity incidents.
- Demonstrated ability to work effectively and technically with external security experts.

Benefits:
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Join us to inspire creativity and bring joy while working in a diverse environment.