Senior Insider Risk Investigator - Technical Lead

TikTok Inc.; San Jose (CA); On-site; USD 134,000 - 223,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid parental leave

Wellbeing benefits

10 holidays, 10 sick days, 17 paid PTO

Job summary

TikTok Inc. is seeking a technical security investigator within the Global Security Organization (GSO) to lead insider risk investigations globally.

You will examine data exfiltration, policy violations, dual employment, and reputational risks, coordinating with Legal, HR, Engineering, and Policy teams while handling sensitive information with discretion. You will work across AMS and other regions, analyze telemetry data, conduct interviews, and produce thorough investigation reports in support

Qualifications

• Strong technical proficiency with log data analysis and security primitives.
• Experience independently leading complex security investigations from detection through remediation.
• Experience performing endpoint, cloud, and identity-based investigations across enterprise environments.
• Ability to handle highly confidential information with discretion.
• Experience mentoring analysts and serving as a technical escalation point.
• Strong experience producing investigation reports for counsel, executives, auditors.

Responsibilities

• Lead technical insider risk investigations from intake to closure involving sensitive matters.
• Analyze telemetry data and indicators across regional infrastructure.
• Conduct interviews with employees across regions with cultural sensitivity.
• Write thorough, region-specific investigation reports aligned with global protocols.
• Coordinate outcomes with Legal/HR/Engineering/PR/Policy teams.
• Monitor and assess external threats and public disclosures.
• Identify regional detection gaps and contribute to threat modeling.
• Maintain discretion with sensitive data per privacy laws.

Skills

Log data analysis

CIA principles

IAM/SSO (Okta, AD)

Cloud services (GCP, AWS, Azure, Ali)

EDR

Network logs

Email logs

Collaboration platform logs (Slack, MS

Git

Python

Security investigations

Endpoint/Cloud/Identity investigations

Confidential data handling

Mentoring analysts

Investigation reporting

Education

Bachelor's degree in Cybersecurity/CS/Software Eng.

Tools

Okta

AD

GCP

AWS

Azure

Slack

Microsoft Teams

Job description

TikTok Inc. is seeking a technical security investigator within the Global Security Organization (GSO) to lead insider risk investigations globally.

You will examine data exfiltration, policy violations, dual employment, and reputational risks, coordinating with Legal, HR, Engineering, and Policy teams while handling sensitive information with discretion. You will work across AMS and other regions, analyze telemetry data, conduct interviews, and produce thorough investigation reports in support