Network Security Engineer

TikTok USDS Joint Venture; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking a Network Security Engineer to design and defend the organization's global network across multi-cloud environments, driving zero-trust strategies and automated defenses.

You will serve as a Level 2 escalation point for incidents, apply AI-driven analytics, and mentor junior analysts while maintaining precise security documentation and compliance with CIS/NIST/SOC 2 frameworks.

Qualifications

• 3+ years in network security engineering, architecture, or tier-2 operations.
• Hands-on cloud security experience in AWS, Azure, or GCP; IAM and micro-segmentation.
• Proficient in Python, Go, or Bash; IaC tools for security automation.
• Experience with SOAR platforms and AI-driven threat detection tools.
• Strong TCP/IP, BGP, OSPF, IPsec/SSL VPNs, DNS, and packet analysis.
• Experience administering enterprise firewalls (Palo Alto, Fortinet, Check Point).

Responsibilities

• Design, deploy, and maintain secure network architectures across multi-cloud environments.
• Develop AI-enhanced network automation and SOAR playbooks for threat containment and provisioning.
• Leverage AIOps to identify anomalies and route security events.
• Manage NGFW, IDS/IPS, and SASE/ZTNA solutions.
• Serve as Level 2 escalation for incidents, perform packet analysis and threat hunting.
• Ensure configurations comply with CIS, NIST, SOC 2; run automated vulnerability assessments.
• Maintain network topology docs, automation scripts, and incident response procedures; mentor others.

Skills

Cloud Security Expertise

Automation & Scripting

AI/SOAR Experience

Core Networking

Firewall Proficiency

Tools

Terraform

Ansible

Palo Alto Cortex XSOAR

Splunk Phantom

Darktrace

Vectra

Job description

Responsibilities

About the team

The TikTok USDS network security team safeguards U.S. user data, end-users, and the internal corporate environment by architecting a strict, zero-trust digital perimeter. They continuously monitor network traffic to proactively detect and neutralize cyber threats across the organization. Additionally, the team engineers robust network infrastructure to support complex operational needs and designs highly secure access architectures that safely connect approved external partners.

As a network security engineer, you will act as a primary escalation point for complex network security incidents and take ownership of critical infrastructure. This role requires a forward-thinking engineer with hands-on expertise in cloud security architectures and network AI automation, utilizing machine learning-driven threat detection and automated remediation playbooks to scale our defensive capabilities.

Responsibilities

• Cloud Network Security: Design, deploy, and maintain secure network architectures across multi-cloud environments (AWS, Azure, and/or GCP), including VPCs, Transit Gateways, Network Security Groups, and Cloud-Native Firewalls.
• AI-Driven Automation: Develop and integrate AI-enhanced Network Automation and SOAR (Security Orchestration, Automation, and Response) playbooks to automate threat containment, routine firewall provisioning, and anomalous traffic mitigation.
• AIOps Integration: Leverage AIOps platforms and machine learning analytics to identify behavioral anomalies, reduce alert fatigue, and predictively route network degradation or security events.
• Infrastructure Defense: Manage and optimize Next-Generation Firewalls (NGFW), Intrusion Detection/Prevention Systems (IDS/IPS), and Secure Access Service Edge (SASE) / Zero Trust Network Access (ZTNA) solutions.
• Incident Response & Escalation: Serve as a Level 2 escalation point for network security incidents, conducting deep-dive packet analysis, threat hunting, and post-incident forensic reviews.
• Continuous Compliance: Ensure all cloud and on-premise network security configurations adhere to industry frameworks (e.g., CIS, NIST, SOC 2) and perform regular automated vulnerability assessments.
• Mentorship & Documentation: Maintain highly accurate, up-to-date documentation of network topologies, automation scripts, and incident response procedures. Mentor Tier 1 SOC and NOC analysts.

Qualifications

Minimum Qualifications:

• 3+ years of dedicated experience in network security engineering, architecture, or tier-2 operations.
• Cloud Security Expertise: Proven hands-on experience securing infrastructure in major public clouds (AWS, Azure, or GCP). Deep understanding of cloud networking constructs, IAM, and micro-segmentation.
• Automation & Scripting: Strong proficiency in scripting languages (Python, Go, or Bash) and Infrastructure-as-Code (IaC) tools (Terraform, Ansible) to build security automation pipelines.
• AI/SOAR Experience: Hands-on experience with SOAR platforms (e.g., Palo Alto Cortex XSOAR, Splunk Phantom) and AI-driven network analytics/threat detection tools (e.g., Darktrace, Vectra, or cloud-native ML security hubs).
• Core Networking: Deep understanding of TCP/IP, BGP, OSPF, IPsec/SSL VPNs, DNS, and packet-level analysis (Wireshark, tcpdump).
• Firewall Proficiency: Advanced administration experience with enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point).

Preferred Qualifications

• Industry Certifications: CCNP Security, PCNSE, AWS Certified Security - Specialty, Azure Security Engineer Associate, or CISSP.
• Zero Trust Architecture: Experience deploying and managing SASE platforms (e.g., Zscaler, Prisma Access, Netskope).
• DevSecOps Familiarity: Understanding of CI/CD pipelines and integrating network security checks into the software development lifecycle.

About USDS

TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision-making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.

On-site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real-time decision-making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.

Why Join Us

Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.

We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from all the global and industry.