Product Security Engineer — Vulnerability & Incident Lead

TIKTOK PTE. LTD.; Singapore; On-site; SGD 90,000 - 130,000; Full time

Job summary

TikTok is seeking a Security Engineer to join the Global Security Organization's vulnerability management team. You will manage product security incidents, drive internal security initiatives, gather intelligence, and validate reported vulnerabilities to strengthen platform safety and trust.

You will analyze CVEs, automate security workflows, and collaborate with external researchers to advance defense strategies across web and mobile products.

Qualifications

• Minimum of 3 years of professional experience in product security, cybersecurity, or a related field.
• Practical experience using AI technologies or AI-related development applied to security workflows or automation.
• Experience in developing tools and systems to automate security processes.
• Proven experience in identifying and understanding security weaknesses, including OWASP Top 10, and documenting risks.
• Experience with managing and responding to cybersecurity incidents in a structured way.
• Ability to work with external security researchers to discuss and resolve security issues.

Responsibilities

• Strategic problem solving & automation: analyze complex security issues, develop practical solutions, and automate processes.
• Vulnerability impact analysis: assess CVEs and public exploit code to determine risk to operations.
• Own the vulnerability lifecycle: identify, analyze, document, and coordinate remediation of security weaknesses.
• Incident response & mitigation: manage cybersecurity incidents and outline risks.
• External collaboration & communication: engage with external experts and communicate technical information clearly.
• Program effectiveness & disclosure: use data to measure security program effectiveness and coordinate responsible disclosure.
• Vulnerability scanning operations: operate and manage vulnerability scanning platforms and prioritize issues.

Skills

AI & Development

Automation Tools

Vulnerability Analysis

Incident Handling

Security Researchers Collaboration

OWASP Top 10

Education

Bachelor's degree in Computer Science or related field

BSCP

OSCP

OSWE

OSCE3

Tools

Python

Go

JavaScript

Unix/Linux

Job description

TikTok is seeking a Security Engineer to join the Global Security Organization's vulnerability management team. You will manage product security incidents, drive internal security initiatives, gather intelligence, and validate reported vulnerabilities to strengthen platform safety and trust.

You will analyze CVEs, automate security workflows, and collaborate with external researchers to advance defense strategies across web and mobile products.