Senior DFIR Investigator & Incident Response Lead

TikTok Inc.; Washington (District of Columbia); On-site; USD 89,000 - 176,000; Full time

Job summary

TikTok USDS Joint Venture LLC is dedicated to the safety and security of Americans who create, discover, and connect with what they love on our apps. The team protects data, people, and systems from internal threats and partners across Security, Legal, HR, IT, and Engineering to detect, investigate, and mitigate insider risks.

As a Senior Analyst on the USJV Forensics & Response team, you will lead complex digital investigations across endpoints, servers, data platforms, cloud

Qualifications

• 1 year of experience in digital forensics & incident response, cybersecurity engineering, or data analytics.
• Strong understanding of Windows, Linux, and macOS file systems (NTFS, EXT4, APFS) and forensic artifacts.
• Moderate report writing skills for executive-level audiences.
• Moderate hands-on experience with evidence handling and chain-of-custody.
• Exposure to data analytics and SQL queries; data lineage.

Responsibilities

• Incident Investigations & Response: Perform digital forensic investigations of endpoints, servers, mobile devices, data platforms, internal systems, and cloud infrastructure.
• Evidence Acquisition & Preservation: Identify, collect, image, and preserve physical and digital evidence in strict adherence to chain-of-custody protocols and legal standards.
• Data Analytics: Analyze complex data queries, trace data lineage, and assess outputs for data residency and compliance issues.
• Artifact & Malware Analysis: Analyze endpoints, file system artifacts, memory dumps, and network traffic to identify root cause, scope of incident, and TTPs.
• Reporting & Documentation: Author detailed forensic reports outlining technical findings, timeline of events, root cause analysis, and remediation recommendations.
• Legal & Compliance Support: Assist with internal investigations, eDiscovery requests, and coordinate with legal teams or law enforcement when necessary.
• Lab & Equipment Management: Maintain, configure, and upgrade the hardware, software, and network infrastructure of the digital forensics laboratory. Ensure go-kits and remote acquisition equipment is prepared for response scenarios.

Skills

Digital forensics

Incident response

Windows/Linux/macOS forensics

Executive-level report writing

Evidence handling & chain-of-custody

Data analytics

Cloud platforms

Scripting (Python, Bash, PowerShell)

Education

Bachelor's degree in cybersecurity engineering, computer science, or digital forensics

Certifications: GCIH, GCIA, GCFE, GCFA, GREM

Job description

TikTok USDS Joint Venture LLC is dedicated to the safety and security of Americans who create, discover, and connect with what they love on our apps. The team protects data, people, and systems from internal threats and partners across Security, Legal, HR, IT, and Engineering to detect, investigate, and mitigate insider risks.

As a Senior Analyst on the USJV Forensics & Response team, you will lead complex digital investigations across endpoints, servers, data platforms, cloud