Senior Endpoint Security Architect & Threat Validation

TikTok; New York (NY); On-site; USD 112,000 - 162,000; Full time

Job summary

TikTok's Global Security Organization seeks a security validation engineer to define enterprise controls and execute validation across servers, endpoints, email systems, IoT, and physical infrastructure. You will contribute to offense‑inspired assessments and build automated validation pipelines with IaC.

You will collaborate with cross‑functional teams to strengthen security posture, develop detection platforms, and integrate with SIEM/EDR while staying aligned to MITRE ATT&CK, NIST, and CIS

Qualifications

• Deep hands-on server, Kubernetes, and enterprise endpoint tech experience.
• ,

Responsibilities

• Build automated validation workflows using IaC and automation frameworks across servers, endpoints, email and IoT.
• Conduct STRIDE threat modeling and secure design libraries.
• Design fault-tolerant data pipelines (Flink/Spark, Kafka) and data lakes (ClickHouse) for telemetry.
• Lead full-stack development of internal endpoint security tools and validation platforms.
• Develop and harden detection platforms with Sigma/YARA and CI/CD to SIEM/EDR.
• Research MITRE ATT&CK TTPs and align security controls to NIST/CIS frameworks.
• Build low-code validation playbooks and microservices with integrations.

Skills

Linux

Windows

Kubernetes

macOS

Adversary Simulation

BAS (Breach-and-Attack Simulation)

MITRE ATT&CK

Threat Intelligence

Python

Go

Bash

C/C++

EDR evasion

Post-exploitation

Education

Master's degree in Computer Science or Information Security

Certifications: OSCP, CISSP, CCSP, GPEN

Tools

Ansible

Terraform

Jenkins

Chef

Puppet

Open Policy Agent

AttackIQ

SafeBreach

Cymulate

Job description

TikTok's Global Security Organization seeks a security validation engineer to define enterprise controls and execute validation across servers, endpoints, email systems, IoT, and physical infrastructure. You will contribute to offense‑inspired assessments and build automated validation pipelines with IaC.

You will collaborate with cross‑functional teams to strengthen security posture, develop detection platforms, and integrate with SIEM/EDR while staying aligned to MITRE ATT&CK, NIST, and CIS