Security Tools Engineer – Automation & Response

TikTok Inc.; San Jose (CA); On-site; USD 112,000 - 223,000; Full time

Job summary

TikTok Inc. is seeking an experienced IT Security Engineer in San Jose to oversee security tool administration, monitoring, incident response, and policy optimization. You will work with cross-functional teams to enhance the security posture and ensure tool health across the enterprise.

The role requires hands-on experience with EDR, SIEM, firewalls, and vulnerability management, plus scripting skills for automation. A strong foundation in Windows, Linux, and network security is essential.

Qualifications

• Bachelor's degree in a technical field required.
• 4+ years in enterprise security engineering or related roles.
• Experience owning production security platforms and operations.
• Hands-on with security tech such as EDR, SIEM, IDS/IPS, VPN, and firewalls.

Responsibilities

• Manage daily operations and administration of security tools.
• Monitor and troubleshoot security infrastructure for availability.
• Perform patching, upgrades, and configuration tuning.
• Collaborate to optimize security policies and rules.
• Conduct audits and compliance assessments of security tools.
• Evaluate new tools and perform PoC testing.
• Review logs to detect anomalies and respond to incidents.
• Create and maintain security documentation and SOPs.
• Provide training and support on security tools.
• Collaborate with vendors and cross-functional teams.

Skills

Security automation

Python scripting

Log analysis

Root cause analysis

Cross-functional collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

EDR/AV

SIEM

IDS/IPS

VPN

SWG

CASB

Firewalls

Vulnerability scanners

Endpoint management platforms

Job description

TikTok Inc. is seeking an experienced IT Security Engineer in San Jose to oversee security tool administration, monitoring, incident response, and policy optimization. You will work with cross-functional teams to enhance the security posture and ensure tool health across the enterprise.

The role requires hands-on experience with EDR, SIEM, firewalls, and vulnerability management, plus scripting skills for automation. A strong foundation in Windows, Linux, and network security is essential.