Senior Manager, App Vulnerability Validation & Verification

TikTok USDS Joint Venture; San Jose (CA); On-site; USD 200,000 - 442,000; Full time

Job summary

TikTok USDS Joint Venture LLC seeks a Senior Manager to architect, scale, and lead the Application Vulnerability Validation team in San Jose. You will own the strategy, build automation, and guide a skilled team of engineers responsible for validating that vulnerabilities are not exploitable in production.

You will partner with global engineering lines, drive advanced triage tooling, and mentor staff to ensure strict security controls across web, mobile, and API surfaces.

Qualifications

• Leadership experience in Application Security or Software Security Engineering.
• Strong coding/scripting ability to interface with scanner APIs and automation.

Responsibilities

• Hire, mentor, and technically direct a high-performing team of AppSec engineers and establish operational standards.
• Drive automation of our AppSec pipeline, building tooling, scanner integrations, and AI-assisted triage to reduce false positives.
• Oversee deep-dive vulnerability verification across web, mobile, and API endpoints to confirm production exploitability.
• Lead attack-path and blast-radius analyses across a large software supply chain to identify systemic risks.
• Collaborate with US and global engineering teams to implement strategic mitigations and provide secure-coding guidance.

Skills

AppSec Leadership

Python/Go/Java/JS

SAST/DAST/SCA tooling

Kubernetes/Docker

LLM-assisted triage

Tools

Checkmarx

Veracode

Burp Suite Enterprise

Snyk

GitHub Advanced Security

Job description

TikTok USDS Joint Venture LLC seeks a Senior Manager to architect, scale, and lead the Application Vulnerability Validation team in San Jose. You will own the strategy, build automation, and guide a skilled team of engineers responsible for validating that vulnerabilities are not exploitable in production.

You will partner with global engineering lines, drive advanced triage tooling, and mentor staff to ensure strict security controls across web, mobile, and API surfaces.