App & Product Security Engineer – Secure-by-Design

Iaas Lc; Sydney; Hybrid; AUD 85,000 - 125,000; Full time

Job summary

TikTok is seeking a graduate security engineer in Sydney to help build scalable, secure-by-design systems. You will work on infrastructure, platforms, and cross-functional teams to protect users and data, with exposure to company strategy on key security initiatives.

Successful candidates will commit to onboarding by year-end and can expect hands-on security reviews, threat modeling, and participation in bug bounty-like activities and AI-powered security exploration.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering or related field.
• Internships, academic projects, security research or relevant personal projects demonstrating security engineering interest.
• Strong fundamentals in application security or related domains with depth in at least one area (web/mobile/network/cloud).
• Proficiency in code: JavaScript (Node JS), Go, Python, Java, C++, Rust.
• Strong problem-solving and debugging skills.

Responsibilities

• Ensure that our applications are designed and implemented to the highest security and privacy standards, maintaining user trust.
• Review and analyze designs, architectures, systems, networks and applications from a security perspective using threat modeling, code reviews, automation and research.
• Identify security issues under new threat scenarios and support incident response and remediation in cross-functional environments.

Skills

JavaScript (Node JS)

Go

Python

Java

C++

Rust

Education

Bachelor's degree in Computer Science / Computer Engineering / Electrical Engineering or related discipline

Tools

HackerOne

BugCrowd

Job description

TikTok is seeking a graduate security engineer in Sydney to help build scalable, secure-by-design systems. You will work on infrastructure, platforms, and cross-functional teams to protect users and data, with exposure to company strategy on key security initiatives.

Successful candidates will commit to onboarding by year-end and can expect hands-on security reviews, threat modeling, and participation in bug bounty-like activities and AI-powered security exploration.