Application/Product Security Engineer Graduate (Security BP) - 2027 Start

TikTok; Sydney; On-site; AUD 85,000 - 110,000; Full time

Job summary

TikTok is seeking a bright Application Security Engineer Graduate for a 2027 start in Sydney. You will work on building secure-by-design platforms and help protect users and infrastructure while learning from a fast-moving security team.

As a graduate, you’ll tackle complex challenges, engage in threat modeling, code reviews, and security research, and contribute to cross-functional initiatives across the company. Availability by year-end is required.

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering or related field.
• Hands-on security engineering internship, project, or security research experience.
• Strong fundamentals in application security or related security domains.

Responsibilities

• Ensure apps are designed and implemented to the highest security and privacy standards thus maintaining and enhancing user trust.
• Review design/architectures, existing systems services, operating systems, networks and applications from a security perspective, via black box testing, code reviews, automation, threat modeling and research.
• Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross‑functional environment driving towards incident resolution.

Skills

Security engineering fundamentals

Threat modeling

Incident response experience

Problem-solving skills

Education

Bachelor's degree in Computer Science / Computer Engineering / Electrical Engineering

Tools

JavaScript (Node JS)

Go

Python

Java

C++

Rust

Job description

Application/Product Security Engineer Graduate (Security BP) - 2027 Start

Team Introduction The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first‑hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure‑by‑design systems and solutions.

Our challenges are not your regular day‑to‑day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference. We are looking for talented individuals to join our team.

As a graduate, you will get opportunities to pursue bold ideas, tackle complex challenges, and unlock limitless growth. Successful candidates must be able to commit to an onboarding date by the end of the year. Please state your availability and graduation date clearly in your resume.

Candidates can apply to a maximum of two positions and will be considered for jobs in the order you apply. The application limit is applicable to our Company and its affiliates' jobs globally. Applications will be reviewed on a rolling basis - we encourage you to apply early.

Responsibilities

• Ensure that our applications are designed and implemented to the highest security and privacy standards thus maintaining and enhancing user trust.
• Review and analyze design, architectures, existing systems services, operating systems, networks and applications from a security perspective, via black box testing, code reviews, automation, threat modeling and research.
• Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross‑functional environment driving towards incident resolution.

Qualifications

Minimum Qualifications

• Individuals who are completing or have recently completed a Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering or a related discipline.
• Hands‑on experience or demonstrated interest in security engineering through internships, academic projects, security research, CTFs, bug bounty, open‑source contributions, or relevant personal projects.
• Strong fundamentals in application security, software engineering, or related security domains.

Familiarity with areas such as web application security, mobile security, network security, operating systems, applied cryptography, or cloud security. Candidates are expected to demonstrate depth or strong interest in at least one of these areas.

• Proficiency in writing and understanding code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.
• Strong problem‑solving skills and excellent debugging / troubleshooting skills.

Preferred Qualifications

• Candidates with hands‑on experience building AI‑powered applications, or experimenting with AI/LLM‑driven approaches for vulnerability detection, security analysis, or security review automation, are strongly preferred.
• CTF players, live competitions and hacking events experience.
• Experience identifying or responsibly disclosing security vulnerabilities, including CVEs, is a plus.
• BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.