Senior Security Engineer - Application / Product Security
About the Company
TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.
Why Join Us
Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible. Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve. Join us.
About the Team
The team's mission is to build infrastructure, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructure. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.
Job Responsibilities
Perform penetrations tests and security assessments to identify vulnerabilities and business-logic failures in core product ecosystems such as TikTok, CapCut, Lark Suite, and Lemon8.
Design and develop security tooling to identify vulnerabilities and optimise the product security review process.
Perform architecture and design reviews to ensure that our applications are implemented to the highest security and privacy standards, thus maintaining and enhancing user trust.
Work closely with software engineering teams to provide security guidance and co-design complex production systems.
Assess vulnerability impact by creating exploits for n-day vulnerabilities and performing variant analysis across our codebases.
#J-18808-Ljbffr