Senior Privacy Red Team Engineer

TikTok Inc.; San Jose (CA); On-site; USD 218,000 - 388,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401(k) with company match

Parental leave

Job summary

TikTok Inc. is seeking a Senior Red Team Engineer for the Privacy and Data Protection Office (PDPO).

You will lead complex privacy-focused security assessments across global systems, building automated tooling to surface and remediate privacy risks at scale. You will partner with engineering, product, legal, and compliance teams to translate privacy concepts into actionable red team tests, and drive end-to-end engagements from scoping to reporting, while advancing offensive privacy testing at

Qualifications

• Hands-on experience as an offensive penetration tester / red teamer.
• Depth in application security, mobile security pentesting, red team exercises, APT simulations and cloud systems.
• Experience performing manual secure code review on production codebases.
• Track record leading complex technical assessments end-to-end as an individual contributor.
• Working knowledge of core privacy concepts such as data minimization, sovereignty, sharing, consent, and privacy policies.
• Familiarity with GDPR and CCPA and applying privacy concepts in security testing.

Responsibilities

• Threat model privacy concepts into adversarial scenarios and design red team engagements.
• Conduct hands-on assessments and tests of internal/external systems to bypass privacy expectations.
• Identify data lifecycle vulnerabilities and demonstrate end-to-end impact.
• Research emerging privacy threats and develop testing methodologies.
• Partner with engineering and product teams to integrate privacy-preserving controls in the SDLC.
• Translate findings into prioritized remediation guidance.
• Build tooling and scripting to scale privacy-focused assessments.

Skills

Penetration testing

Red team

Application security

Cloud security

Secure code review

Privacy concepts

Job description

TikTok Inc. is seeking a Senior Red Team Engineer for the Privacy and Data Protection Office (PDPO).

You will lead complex privacy-focused security assessments across global systems, building automated tooling to surface and remediate privacy risks at scale. You will partner with engineering, product, legal, and compliance teams to translate privacy concepts into actionable red team tests, and drive end-to-end engagements from scoping to reporting, while advancing offensive privacy testing at