Security Engineer - USDS (Multiple Positions)

Responsibilities

About TikTok USDS Joint Venture LLC
TikTok USDS Joint Venture LLC is dedicated to the safety and security of millions of Americans who create, discover, and connect with what they love on the apps we operate. The Joint Venture has been established in compliance with the Executive Order signed by President Trump on September 25, 2025. Our foundation is a comprehensive data privacy and cybersecurity program. We operate under defined safeguards to protect national security and secure U.S. user data, apps and the algorithm. We safeguard the U.S. content ecosystem, holding decision-making authority for trust and safety policies and moderation. USDS Joint Venture helps ensure Americans can continue to express their creativity, discover new hobbies and interests, and build thriving communities and businesses on a global scale.

Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect - and our global, diverse teams make that possible.
Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company.
Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come.
By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users.
When we create and grow together, the possibilities are limitless.
Join us.

About the Team
Our team plays a crucial role in ensuring the company's success. We seek people who are willing to learn and put in the effort to solve problems. Our challenges are not your regular day-to-day problems - you'll be part of a team that's developing new solutions to new challenges. It's working fast, at scale, and we're making a difference. We are looking for talents to join us on this exciting journey!

Responsibilities
Develop security tools and provide operational support to maintain a solid information security practice for our company, including email security, web application firewall operations, and security infrastructure for services, applications, and/or platforms.
Work on network segregation design to improve our security posture.
Conduct research across spam patterns and categories and propose ideas/solutions over the factor and rule creation.
Create monitoring tools for security infrastructure and improve on visibility over Hardware Security Module (HSM) and Vault.
Create and set up a rule testing environment and tool.
Work with cross-functional teams to identify security vulnerabilities and coordinate incident response.
Maintain accurate records of vulnerability reports, assessments, and remediation efforts, ensuring clear documentation of findings and resolutions.

Qualifications

Qualifications
Must have a Master's degree or foreign equivalent degree in Computer Science, Engineering (any), Data Science, Information Technology, Cybersecurity, Mathematics, or a related field, and 1 year of related work experience; OR a Bachelor's degree or foreign equivalent degree in Computer Science, Engineering (any), Data Science, Information Technology, Cybersecurity, Mathematics, or a related field, and 3 years of related work experience.

Of the required experience, must have 1 year of experience in each of the following:
Designing and evolving enterprise-wide automated security processes and streamlining security operations including risk assessment and vulnerability management;
Performing security reviews including Firewall rules review, service account provision, and quarterly access review of sensitive groups to comply with compliance requirements;
Assessing current and emerging threats, cyberattacks, and zero-day vulnerabilities and recommending security controls and corrective actions to mitigate vulnerability risk;
Analyzing business logic to configure security tools and products based on the logic to provide security protection to services, applications, platforms, or websites;