Senior Security Engineer - Secure-by-Design & Threat Modeling

TikTok Inc.; San Jose (CA); On-site; USD 242,000 - 388,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) with company match

Paid parental leave

Short-term and long-term disability

Life insurance

Wellbeing benefits

10 paid holidays per year

Job summary

TikTok Inc. is seeking a security-focused engineer to drive secure-by-design systems, protecting user data and privacy across our applications.

You will review designs, perform threat modeling, and collaborate with cross-functional teams to strengthen the SDLC and coordinate incident response. The role requires strong coding skills in JavaScript/Node.js (others like Go/Python/Java/C++/Rust also acceptable), plus experience with multiple security domains and compliance standards.

Qualifications

• Master's or Bachelor's in CS/Engineering/Info Security or related field with required years of experience.
• At least 2 years in security areas including web/mobile apps, networks, OS internals or cloud security.
• Experience with threat modeling, security tooling development or privacy engineering.
• Ability to write/review code in JavaScript/Node.js; Go/Python/Java/C++/Rust also acceptable.
• Familiarity with security frameworks such as ISO 27001, NIST CSF, PCI-DSS or HIPAA.
• Strong debugging and troubleshooting skills.

Responsibilities

• Drive scalable and secure-by-design systems with strong privacy by design.
• Perform reviews of designs, architectures, and systems from security perspective; use threat modeling and research.
• Contribute to SDLC security assessments for new features.
• Collaborate with cross-functional teams to identify threats and coordinate incident response.
• Conduct developer feedback interviews to optimize SDLC.
• Mentor junior team members.

Skills

Web application security

Mobile application security

Network security

OS internals & hardening

Applied cryptography

Cloud computing

Threat modeling

Security tooling development

Privacy engineering

Coding: JavaScript/Node.js

Education

Master's degree in CS/Engineering/Info Security

Bachelor's degree in CS/Engineering/Info Security

Job description

TikTok Inc. is seeking a security-focused engineer to drive secure-by-design systems, protecting user data and privacy across our applications.

You will review designs, perform threat modeling, and collaborate with cross-functional teams to strengthen the SDLC and coordinate incident response. The role requires strong coding skills in JavaScript/Node.js (others like Go/Python/Java/C++/Rust also acceptable), plus experience with multiple security domains and compliance standards.