Head of Security Posture Validation

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Job summary

TikTok USDS Joint Venture seeks a Manager of Security Posture Validation to lead a specialized team and deliver an in-house continuous control-validation platform. You will drive adversary emulation, pipeline automation, and leadership-facing posture metrics across cloud, web, and mobile environments.

This builder-leader role requires deep security expertise, cross-team collaboration with executives, and a track record of turning complex vulnerabilities into actionable risk insights for ongoing

Qualifications

• 8+ years in offensive security or privacy disciplines.
• 3+ years in people leadership or management.
• Experience across AWS/Azure/OCI, iOS/Android, and web security.
• Knowledge of standards ISO 27001, NIST 800-53, PCI-DSS.

Responsibilities

• Lead a team of offensive security and privacy engineers.
• Own the in-house validation platform and dashboard.
• Run adversary-emulation and purple-team exercises.
• Interface with executives, Legal, Risk, and Eng.
• Define SOPs and ROE for modern tech stacks.
• Build CI/CD validated control pipelines and onboarding.
• Collaborate with Blue Teams to remediate findings.
• Turn results into leadership-facing posture metrics.

Skills

Offensive security

Privacy engineering

Cloud security

Red Teaming

MITRE ATT&CK

Automation tooling

Leadership

Scripting (Python)

Education

Bachelor's degree in CS/InfoSec

Tools

Burp Suite Pro

Cobalt Strike

Frida

Nessus

MobSF

SQLMap

Job description

TikTok USDS Joint Venture seeks a Manager of Security Posture Validation to lead a specialized team and deliver an in-house continuous control-validation platform. You will drive adversary emulation, pipeline automation, and leadership-facing posture metrics across cloud, web, and mobile environments.

This builder-leader role requires deep security expertise, cross-team collaboration with executives, and a track record of turning complex vulnerabilities into actionable risk insights for ongoing