DevSecOps Engineer

TikTok Inc.; San Jose (CA); Sur place; USD 76 000 - 146 000; Plein temps

Avantages offerts par ce poste

Medical, dental, and vision insurance

401(k) with company match

Paid holidays and personal time

Résumé du poste

TikTok USDS Joint Venture LLC is seeking a DevSecOps Engineer in San Jose, CA, to embed security into software architectures and CI/CD pipelines. You will automate review workflows, assess technical obligations, and perform pre-production inspections across code and deployment processes.

Join a mission-driven team focusing on engineering-led security, with on-site collaboration and a strong emphasis on documenting findings and improving security controls across modern platforms.

Qualifications

• Ability to read, write, and debug code (Python/Go/Java/C++).
• Experience integrating security into SDLC and CI/CD.
• Familiarity with REST APIs, web architectures, and build environments.
• Proficient with modern git workflows and ticketing/triage tools (Jira, Sonar).

Responsabilités

• Evaluate intake requests to determine applicable security obligations for products, features, AI models, and software changes.
• Conduct deep-dive technical reviews and code inspections of application source code, CI/CD pipelines, REST APIs, secrets management, and software supply chains.
• Inspect and validate AI agent-harness safeguards and runtime packages against security baselines.
• Apply standard security review frameworks to ensure software meets core security standards before launch.
• Build, maintain, and execute automated scripts to streamline intake verification, triage workflows, and code analysis.
• Document technical findings, control validations, and identified security gaps clearly and precisely.
• Identify edge cases and unmapped risks during reviews and elevate them with complete documentation.

Connaissances

Code proficiency

CI/CD pipelines

SDLC knowledge

REST APIs understanding

Git workflows

Technical writing

Outils

Python

Go

Java

C++

Jira

Sonar

Description du poste

Responsibilities

We are a high-impact Software Assurance (SwA) Design team dedicated to embedding security directly into modern platforms, CI/CD pipelines, and software architectures. Our team focuses on engineering-led security—evaluating technical obligations, automating review workflows, and conducting targeted code and pipeline inspections before software hits production.

We are seeking a DevSecOps Engineer in San Jose, CA to help shape our engineering-led security initiatives(). In this role, you will integrate security seamlessly into our software architectures and CI/CD pipelines by automating review workflows, assessing technical obligations, and performing targeted pre-production code and pipeline inspections.

Responsibilities

• Evaluate incoming intake requests across engineering initiatives to determine applicable security obligations for products, features, AI models, and software changes.
• Conduct deep-dive technical reviews and code inspections covering application source code, CI/CD deployment pipelines, REST APIs, secrets management configurations, and software supply chains.
• Inspect and validate defined AI agent-harness safeguards and runtime packages against established security baselines.
• Apply standard security review frameworks and methods to ensure software deliverables meet core security standards before launch.
• Build, maintain, and execute automated scripts and tooling to streamline routine intake verification, triage workflows, and code analysis.
• Document technical findings, control validations, and identified security gaps with clarity and precision.
• Identify edge cases, novel software architectures, and unmapped risk decisions during reviews and elevate them to Senior DevSecOps Architects with complete technical documentation.

Qualifications

Minimum Qualifications:

• 3 years of hands‑on experience building, operating, or maintaining production software, infrastructure, or CI/CD pipelines (Software Engineering, SRE, DevOps, Platform, Build, or AppSec background). Practical engineering experience is accepted as equivalent to dedicated security experience.
• Demonstrated capability to read, write, and debug code (e.g., Python, Go, Java, C++) and write scripts to automate manual inspection tasks.
• Solid understanding of the Software Development Lifecycle (SDLC), web architectures, REST APIs, and CI/CD build environments.
• Solid understanding of architectural security concepts and secure code design.
• Familiarity with modern git workflows and ticketing/triage tools (e.g., Jira, Sonar).
• Proven record of being able to solve technical challenges and documenting the solution and/or related run books.

Preferred Qualifications:

• 3+ years of hands‑on experience in Application Security, Software Assurance, Security Engineering, or production software development within an enterprise environment.
• Proven experience evaluating incoming intake requests, triaging software changes, and applying security requirements directly into engineering workflows.
• Practical expertise in threat modeling, risk evaluation, and architectural security across modern API protocols (REST, gRPC, GraphQL), interface security, input validation, and sanitization.
• Working knowledge of AI/LLM security fundamentals, prompt injection defense strategies, runtime agentic safeguards, and AI agent-harness baseline validation.
• Hands‑on familiarity with core industry frameworks and security standards, including NIST, OWASP Top 10, OWASP LLM Top 10, MITRE ATT&CK, MITRE D3FEND, and MITRE ATLAS.
• Strong technical writing skills with demonstrated experience drafting technical security documentation, secure coding guidelines, runbooks, compliance artifacts, and automated check specifications.

About USDS

TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision‑making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.

On‑site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real‑time decision‑making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in‑person schedule up to 5 days a week.

Why Join Us

Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.

We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

USDS Reasonable Accommodation

USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA

Job Information

【For Pay Transparency】Compensation Description (Annually)

The base salary range for this position in the selected city is $76000 - $146400 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others.

Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates:

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;
2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and
3. Exercising sound judgment.