Intelligence Analyst - Influence Operations Intelligence & Discovery

TikTok USDS Joint Venture; Washington (District of Columbia); On-site; USD 89,000 - 176,000; Full time

Benefits offered by this job

Health insurance

401(k) with company match

Paid parental leave

Disability coverage

Life insurance

Job summary

TikTok USDS Joint Venture LLC is seeking a skilled threat intelligence professional to join the IOID Team in Washington, DC. You will apply geopolitical insight and OSINT to identify trends, uncover adversary tradecraft, and document TTPs to support rapid security actions.

You will develop tracking, report on hunting findings, and coordinate with cross-functional teams to drive risk-informed decisions. The role requires strong written and verbal communication and the ability to operate under

Qualifications

• 4+ years of professional experience in threat intelligence or security operations.
• Experience designing and optimizing operational workflows in fast-paced technical environments.
• Ability to hunt for high-risk activity and analyze diverse data sources.
• Knowledge of information warfare principles and attacker TTPs with an adversarial lens.

Responsibilities

• Trend IO and adversary strategic objectives using geopolitical expertise.
• Conduct OSINT monitoring to identify off-platform trends.
• Record and map adversary trends and tradecraft.
• Maintain tools for tracking IO campaigns and investigations.
• Respond to escalated events and actions as needed.
• Develop intelligence reporting on hunting and investigation findings.

Skills

Geopolitical expertise

OSINT monitoring

Adversary TTP identification

Threat management & incident response

Technical documentation & briefing

Education

Bachelor's degree in security / cyber security

Bachelor's degree in political science

Bachelor's degree in computer science

Tools

SQL

Graph analysis tools

AI agents for threat intel

Job description

Responsibilities

About the Tean
US Data Security (USDS) Joint Venture (JV) provides industry-leading security and privacy services to US users and supports TikTok Global. Our organization uses four principles that guide our operations. Firstly, we champion trust and transparency, leading the charge that drives customer confidence. Secondly, we are an engine of innovation. Thirdly, we drive risk-informed and empowered decision-making, giving our business leaders the information needed to make key decisions. Finally, we proactively identify and reduce risk while enabling innovative product development – to consistently build sustainable world-class security capabilities.

About the Role

As a member of the Influence Operations Intelligence & Discovery (IOID) Team, the candidate will leverage strategic geopolitical expertise and tactical knowledge of influence operations to identify trends and tradecraft of Advanced Persistent Manipulators (APMs) to drive action and response, unveil command and control (C2) elements, and document adversary tactics, techniques, and procedures (TTPs). The candidate must be able to use formal intelligence and incident response best practices to develop tracking and documentation of identified APMs. The candidate must have expert threat management skills including identification, prioritization, treatment, classification, and monitoring. The candidate must have excellent written and verbal communications skills for developing and briefing intelligence products for cross-functional teams and leadership as appropriate. Further, the candidate is expected to use communication skills to work closely with cross-functional partners in response to actions across a variety of security disciplines to disseminate information and reporting as appropriate in support of TikTok's critical business and operational needs.

Responsibilities:

• Possess geopolitical expertise in areas of responsibility to accurately trend IO and adversary strategic objectives


• Conduct OSINT monitoring and research to identify off-platform trends


• Uncover, record, and map adversary trends and tradecraft


• Maintain tools needed for tracking and memorialization of adversary actions and IO campaigns


• Respond to escalated events and actions when needed


• Develop intelligence reporting on hunting and investigation findings

Qualifications

Minimum Qualifications

• 4+ years of professional experience, Proven track record of acquiring, aggregating, analyzing, and reporting on complex datasets. Expertise in open-source intelligence (OSINT) collection, tradecraft, and intelligence reporting.


• Experience designing, optimizing, and executing operational workflows within fast-paced technical environments. Ability to evaluate, prioritize, and mitigate critical business risks in real-time high-stress scenarios.


• Demonstrated ability to proactively hunt for diverse types of high-risk activity, including \"unknown unknowns.\" Rigorous analytical and critical-thinking skills with a high degree of attention to detail.


• Deep understanding of information warfare principles and comprehensive knowledge of modern information warfare history over the past decade. Firm grasp of adversary TTPs (Tactics, Techniques, and Procedures) with the ability to apply an adversarial lens to counter platform abuse.


• Hands‑on experience detecting, tracking, and dissecting influence operations, disinformation, and other forms of social media manipulation. Ability to think creatively and identify previously unknown threats, vulnerabilities, and risks, while driving cross-functional stakeholder buy‑in to implement strategic change.


• Measurable knowledge/experience from proven industry, military, defense, or government operations and/or bachelor’s degree in security (including cyber security), political science, and/or computer science or equivalent information security, privacy, risk, compliance, project management or similar discipline from an accredited college or university.

Preferred Qualifications

• 4+ years of professional experience in threat intelligence, security operations, data analysis, or a related domain


• Experience identifying, tracking, and analyzing adversary tradecraft and behavioral tactics.


• Proven track record of conducting threat actor attribution and campaign mapping. Experience translating adversary tradecraft into detection logic and developing automated detection rules.


• Strong written and verbal communication skills, with a history of collaborating across global, multi-functional teams and intelligence partners. Experience authoring and disseminating intelligence reports tailored for both technical practitioners and leadership.


• Deep knowledge of threat intelligence platforms, data feeds, and open/closed intelligence sources.Excellent time management, prioritization, negotiation, and interpersonal skills in high-tempo environments.


• Self‑motivated to drive results and scale security capabilities within a complex enterprise environment. Proficiency in SQL for querying and analyzing large, complex data sets.


• Hands‑on experience leveraging graph analysis tools to map threat actor infrastructure and entity relationships. Experience developing AI agents and designing innovative AI‑driven solutions for threat intelligence workflows.

About USDS

TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program we operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision‑making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.

On‑site presence across teams allows the company to operate with greater speed, alignment, and agility — especially in areas like real‑time decision‑making, team development, and integrated execution. As such, the company is shifting from a hybrid work model to a fully in‑person schedule up to 5 days a week.

Why Join Us

Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.

We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an \"Always Day 1\" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

USDS Reasonable Accommodation

USDS is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/USDS-RA

Job Information

【For Pay Transparency】 Compensation Description (Annually) - Washington, DC

The base salary range for this position in the selected city is $ 88920 - $ 176400 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short‑term and long‑term disability coverage, life insurance, wellbeing benefits, among others.

Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.