Head of Continuous Security Posture Validation

TikTok USDS Joint Venture; San Jose (CA); On-site; USD 209,000 - 438,000; Full time

Job summary

TikTok USDS Joint Venture LLC seeks a Manager of Security Posture Validation to build an in-house continuous control-validation platform and leadership-facing dashboard. You will own the strategy and delivery, translating adversary tradecraft into automated tests and a clear security posture view.

You will lead a cross-functional team spanning red, purple, and control-validation engineering, collaborating with detection and IR teams to improve coverage across cloud, web, and mobile environments.

Qualifications

• 8+ years in offensive security or privacy disciplines with 3+ years in people management
• Experience across Cloud, Mobile, and Web Application security ecosystems
• Strong knowledge of security standards (ISO 27001, NIST 800-53, PCI-DSS) and adversary emulation/breach-and-attack-simulation

Responsibilities

• Lead, mentor, and grow a specialized team of offensive security and privacy engineers
• Own the vision, roadmap, and delivery of an in-house continuous validation platform
• Run adversary-emulation and purple-team exercises as primary input to the platform
• Translate complex vulnerabilities into actionable business risks for executives
• Define SOPs and ROEs for testing modern tech stacks (Kubernetes, Serverless, Mobile)
• Design automated, CI/CD-integrated validation pipelines with self-service capabilities
• Collaborate with Blue Teams to close coverage gaps and remediate effectively
• Turn validation results into leadership-facing posture metrics and trends

Skills

Offensive security

Cloud security

Leadership

Adversary emulation

MITRE ATT&CK coverage

Privacy by design

Education

Bachelor's degree in Computer Science or related field

Tools

Burp Suite Pro

Cobalt Strike

Frida

Objection

MobSF

SQLMap

Nessus

Job description

TikTok USDS Joint Venture LLC seeks a Manager of Security Posture Validation to build an in-house continuous control-validation platform and leadership-facing dashboard. You will own the strategy and delivery, translating adversary tradecraft into automated tests and a clear security posture view.

You will lead a cross-functional team spanning red, purple, and control-validation engineering, collaborating with detection and IR teams to improve coverage across cloud, web, and mobile environments.