Insider Risk Security Engineer — Automation & Detection

TikTok; San Jose (CA); On-site; USD 162,000 - 317,000; Full time

Benefits offered by this job

Medical, dental & vision insurance

401(k) with company match

Parental leave

Disability & life insurance

Wellbeing benefits

Paid holidays

Paid sick days

Paid personal time

Job summary

TikTok is seeking a Security Software Engineer for Insider Risk within the Global Security Organization in San Jose. You will drive detection and remediation strategies, and build automation to reduce insider risk while collaborating with RD and cross-functional teams.

The role emphasizes strong coding in Python/Golang/Typescript, SQL proficiency, and cloud platform experience, with emphasis on secure software lifecycle practices.

Qualifications

• Bachelor's degree in CS or related field.
• 3+ years of industry experience as an engineer.
• Experience with security production-readiness reviews and SDLC security.
• Knowledge of cloud platforms (OCI, GCP, AWS) and related tooling.

Responsibilities

• Review Insider Risk incidents and scope technical remediations.
• Identify strategies to mitigate insider threats for users and business.
• Maintain compliant data flows and automation access across regions.
• Contribute to projects via code commits, root cause analyses, code reviews, and architecture design.
• Collaborate with cross-functional teams to deploy automated solutions cross-regionally.

Skills

Python

Golang

Typescript

SQL

Application security

Technical documentation

Discretion handling

Education

Bachelor's degree in Computer Science or related field

Tools

Cloud platforms (OCI, GCP, AWS)

Job description

TikTok is seeking a Security Software Engineer for Insider Risk within the Global Security Organization in San Jose. You will drive detection and remediation strategies, and build automation to reduce insider risk while collaborating with RD and cross-functional teams.

The role emphasizes strong coding in Python/Golang/Typescript, SQL proficiency, and cloud platform experience, with emphasis on secure software lifecycle practices.