Senior Privacy Red Team Engineer

TikTok; Singapore; On-site; SGD 180,000 - 260,000; Full time

Job summary

TikTok is seeking a senior red team engineer to lead privacy-focused offensive assessments across internal and external systems. You’ll surface privacy risks at scale, develop new testing methodologies, and drive remediation with engineering and product teams.

You will model privacy concepts into concrete abuse cases, perform hands-on testing in cloud and mobile environments, review code for privacy bugs, and build scalable tooling to automate checks.

Qualifications

• 5+ years of hands-on experience as an offensive penetration tester / red teamer.
• Demonstrated depth in application security and mobile security pentesting.
• Demonstrated depth in red team exercises, APT simulations and cloud systems.
• Experience performing manual secure code review on production codebases.
• Track record of leading complex technical assessments end-to-end as an individual contributor - threat modeling, scoping, executing, and technical reporting.
• Working knowledge of core privacy concepts such as data minimization, data sovereignty, data sharing, consent, and privacy policies, with the ability to translate them into security testing scenarios.
• Familiarity with major privacy regulations (e.g., GDPR, CCPA) and how they map to technical controls. Ability to understand and apply foundational privacy concepts in a security testing context.

Responsibilities

• Threat model privacy concepts (consent, data sharing, data minimization, purpose limitation, retention, sovereignty, product privacy) into concrete adversarial scenarios and design red team engagements.
• Conduct deep, hands-on technical assessments and penetration tests of internal and external-facing systems, products, and services, focusing on bypassing user privacy expectations from an external attacker perspective.
• Identify exploitable issues across the data lifecycle—data flows between services and sharing with external parties—and demonstrate end-to-end impact.
• Research emerging privacy threats and attack techniques; develop new testing methodologies and abuse cases ahead of them landing in production.
• Partner with engineering and product teams to integrate privacy-preserving controls throughout the SDLC, and translate findings into remediation guidance.
• Research and analyze emerging threats in privacy, proactively identifying mitigation strategies and testing methodologies to protect user data.
• Help shape practices, processes, and documentation for privacy red teaming at TikTok, both internally and with cross-functional groups.
• Build tooling, scripts, and frameworks to scale privacy-focused assessments and automate recurring checks.

Skills

Offensive security

AppSec

Privacy engineering

Code review

Independent work

Communication

Threat modeling

Cloud security

Tools

MITRE ATT&CK

Job description

TikTok is seeking a senior red team engineer to lead privacy-focused offensive assessments across internal and external systems. You’ll surface privacy risks at scale, develop new testing methodologies, and drive remediation with engineering and product teams.

You will model privacy concepts into concrete abuse cases, perform hands-on testing in cloud and mobile environments, review code for privacy bugs, and build scalable tooling to automate checks.