Head of Continuous Security Posture Validation

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 168,000 - 394,000; Full time

Job summary

TikTok USDS Joint Venture LLC is seeking a Manager of Security Posture Validation to design and deliver an in-house continuous control-validation platform, turning adversary techniques into automated tests and a leadership-facing posture dashboard.

You will lead red team, purple team, and control-validation engineers across cloud, mobile, and web, partnering with Legal, Risk & Compliance, and Engineering to translate findings into pragmatic remediation.

Qualifications

• 8+ years in offensive security or privacy disciplines (Red Teaming, Pentesting, Vulnerability Research).
• 3+ years in formal people management or lead role.
• Proven cross-cloud security experience across AWS/Azure/OCI, mobile and web apps.
• Experience building tooling or platforms adopted by others.

Responsibilities

• Lead offensive security and privacy engineers; foster innovation.
• Build in-house continuous validation platform and dashboard.
• Coordinate red/purple team exercises; translate results to governance.
• Interface with executive leadership, Legal, Risk & Compliance.
• Define SOPs and ROE for modern tech stacks.
• Develop automated validation pipelines integrated with CI/CD.
• Collaborate with Blue Teams to remediate findings.
• Provide leadership metrics via posture dashboards.

Skills

Red Teaming

Cloud Security

Threat Emulation

Tooling Automation

MITRE ATT&CK

Privacy by Design

Python/Golang

Windows/Linux/MacOS

Education

Bachelor’s degree in CS/InfoSec/Engineering

Tools

Burp Suite Pro

Cobalt Strike

Frida

Objection

MobSF

SQLMap

Nessus

Job description

TikTok USDS Joint Venture LLC is seeking a Manager of Security Posture Validation to design and deliver an in-house continuous control-validation platform, turning adversary techniques into automated tests and a leadership-facing posture dashboard.

You will lead red team, purple team, and control-validation engineers across cloud, mobile, and web, partnering with Legal, Risk & Compliance, and Engineering to translate findings into pragmatic remediation.