AI-Driven Detection & Response Security Engineer

TIKTOK PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

TikTok PTE. LTD. in Singapore seeks a Detection Engineer to mine anomalous patterns from massive host, network, endpoint, authentication, and business logs. You will own end-to-end detection pipelines and contribute to AI security risk mitigation across global platforms.

You will apply MITRE ATLAS, ML-based methods, and streaming analytics to defend against external intrusions and AI-specific threats, working with a global security team to secure users worldwide.

Qualifications

• 5+ years in information security or related field.
• Experience correlating large-scale security telemetry.
• Strong data analysis, statistics, and ML for anomaly detection.
• Hands-on experience building detection rules for SIEM/EDR.
• Knowledge of AI agent security risks (LLMs) and hardening.

Responsibilities

• Own end-to-end detection rules, models, and pipelines across large telemetry.
• Build streaming detection pipelines using statistics and unsupervised learning.
• Design detection for internal agent systems using MITRE ATLAS.
• Detect emerging patterns: agent abuse, unauthorized tool calls, collusion.
• Monitor agent-LLM-tool-data interactions for manipulation and exfiltration.
• Hunt retrospectively against cold storage and historical logs.
• Improve signal-to-noise ratio and reduce alert fatigue with logging standards.

Skills

Information security

Data analysis

Machine learning basics

Threat hunting

SIEM/EDR queries

AI security awareness

Education

Bachelor's degree in a relevant field

Tools

SIEM platforms

EDR tools

Python/SQL for queries

ML libraries

Job description

TikTok PTE. LTD. in Singapore seeks a Detection Engineer to mine anomalous patterns from massive host, network, endpoint, authentication, and business logs. You will own end-to-end detection pipelines and contribute to AI security risk mitigation across global platforms.

You will apply MITRE ATLAS, ML-based methods, and streaming analytics to defend against external intrusions and AI-specific threats, working with a global security team to secure users worldwide.