Senior Manager, AppSec Validation & Exploitability

TikTok USDS Joint Venture; San Jose (CA); On-site; USD 200,000 - 442,000; Full time

Job summary

TikTok USDS Joint Venture LLC seeks a Senior Manager to architect and lead its Application Vulnerability Validation team in San Jose. You will own strategy, headcount, and cross-functional collaboration across U.S.

and global product lines to ensure vulnerabilities are validated in production environments. You will build and drive advanced automation, LLM-assisted triage, and a scalable internal platform to minimize false positives and accelerate secure software delivery.

Qualifications

• Proven AppSec leadership with impact in security engineering or product security roles.
• Strong proficiency in Python, Go, Java, or JavaScript for automation and tooling.
• Deep familiarity with enterprise SAST/DAST/SCA platforms (Checkmarx, Veracode, Burp Suite, Snyk, GHAS).
• Understanding of microservices, CI/CD, Kubernetes, API gateways, and modern software architectures.

Responsibilities

• Hire, mentor, and technically direct a high-performing AppSec engineering team.
• Architect and drive automated AppSec pipelines and triage tooling to reduce false positives.
• Oversee in-depth vulnerability verification across web, mobile, and API surfaces.
• Collaborate with US and global teams to implement systemic mitigations and security guidance.

Skills

AppSec Leadership

Scripting Fluency

Security Tooling

Cloud & Microservices

Tools

Checkmarx

Veracode

Burp Suite Enterprise

Snyk

GitHub Advanced Security

Job description

TikTok USDS Joint Venture LLC seeks a Senior Manager to architect and lead its Application Vulnerability Validation team in San Jose. You will own strategy, headcount, and cross-functional collaboration across U.S.

and global product lines to ensure vulnerabilities are validated in production environments. You will build and drive advanced automation, LLM-assisted triage, and a scalable internal platform to minimize false positives and accelerate secure software delivery.