Privacy Engineer (RED team) - PDPO (Singapore)

TikTok; Singapore; On-site; USD 90,000 - 130,000; Full time

Job summary

A leading company is seeking a Privacy and Data Protection Specialist to join their team. This role involves conducting technical assessments, collaborating with various teams to integrate privacy measures, and researching emerging threats. Ideal candidates will have extensive experience in web security, penetration testing, and a deep understanding of privacy concepts.

Qualifications

• 3+ years experience in web security or data security.
• Experience in Penetration Testing or Red Team exercises.
• Ability to analyze complex systems for privacy risks.

Responsibilities

• Conduct in-depth technical assessments to identify privacy issues.
• Collaborate with engineering and product teams for privacy measures.
• Research and analyze emerging privacy threats and develop strategies.

Skills

Computer Science fundamentals

Security engineering

Privacy engineering

Data minimization

Anonymization

Secure data processing

Penetration testing

Manual secure code review

Collaboration

Excellent communication

Job description

Responsibilities

About the team: PDPO (Privacy and Data Protection Office) leads, supervises, and empowers TikTok's privacy initiatives in an industry-leading manner. This team specializes in privacy risks and consults across the company to implement safeguards and mitigations, ensuring user privacy across TikTok's products and platforms.

What you’ll do:

1. Conduct in-depth technical assessments to identify privacy issues in systems, products, and services.
2. Collaborate with engineering and product teams to integrate privacy-preserving security measures throughout the software development lifecycle (SDLC).
3. Research and analyze emerging privacy threats, develop mitigation strategies, and testing methodologies to protect user data.
4. Automate privacy assessments using tooling, scripts, and frameworks to improve scalability and efficiency.
5. Develop practices, processes, mechanisms, and documentation for privacy activities, internally and with working groups.

Knowledge, Skills & Abilities:

• Strong fundamentals in Computer Science, Security engineering, and Privacy engineering.
• Deep understanding of privacy concepts such as data minimization, anonymization, and secure data processing.
• Experience in penetration testing / red teaming.
• Proficiency in manual secure code review to identify vulnerabilities and data leakage risks.
• Ability to collaborate, prioritize, and work independently.
• Excellent communication skills for cross-functional collaboration with engineering, legal, and compliance teams.

Qualifications

Minimum Qualifications:

• 3+ years experience in web security or data security.
• Experience in Penetration Testing or Red Team exercises.
• Ability to analyze complex systems for privacy risks and recommend actions.

Preferred Qualifications:

• Contributions to the security or privacy community (research, blogging, presentations, bug bounties, CVEs).
• Experience with testing frameworks like MITRE ATT&CK.
• 2+ years scripting experience including code maintenance and review.
• Experience with GDPR, CCPA, or similar privacy regulations.
• Experience with DAST or SAST tools.