Senior Security Engineer - Application / Product Security
This job is no longer available.
Responsibilities
The team's mission is to build infrastructure, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructure. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.
Job Responsibilities
- Perform penetrations tests and security assessments to identify vulnerabilities and business-logic failures in core product ecosystems such as TikTok, CapCut, Lark Suite, and Lemon8.
- Design and develop security tooling to identify vulnerabilities and optimise the product security review process.
- Perform architecture and design reviews to ensure that our applications are implemented to the highest security and privacy standards, thus maintaining and enhancing user trust.
- Work closely with software engineering teams to provide security guidance and co-design complex production systems.
- Assess vulnerability impact by creating exploits for n-day vulnerabilities and performing variant analysis across our codebases.
Want more jobs like this?
Get Software Engineering jobs in Sydney, Australia delivered to your inbox every week.
Qualifications
Minimum Qualifications
- 5+ years of security engineering experience such as penetration testing, source code review, design review, threat modeling, security mitigation development, or security tooling development.
- Solid experience in writing and reviewing code in at least two of the following programming languages: Kotlin, Swift, TypeScript, Go, or Python.
- Advanced knowledge and understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing. You're expected to be an expert in at least one of these areas.
- Strong problem-solving skills and excellent debugging / troubleshooting skills.
Preferred Qualifications
- Over 2 years of experience in managing an engineering team, demonstrating robust leadership skills and resilience under stress.
Perks and Benefits
Health and Wellness
- Health Insurance
- Dental Insurance
- Vision Insurance
- HSA
- Life Insurance
- Fitness Subsidies
- Short-Term Disability
- Long-Term Disability
- On-Site Gym
- Mental Health Benefits
- Virtual Fitness Classes
Parental Benefits
- Fertility Benefits
- Adoption Assistance Program
- Family Support Resources
Work Flexibility
- Flexible Work Hours
- Hybrid Work Opportunities
Office Life and Perks
- Casual Dress
- Snacks
- Pet-friendly Office
- Happy Hours
- Some Meals Provided
- Company Outings
- On-Site Cafeteria
- Holiday Events
Vacation and Time Off
- Paid Vacation
- Paid Holidays
- Personal/Sick Days
- Leave of Absence
Financial and Retirement
- 401(K) With Company Matching
- Performance Bonus
- Company Equity
Professional Development
- Promote From Within
- Access to Online Courses
- Leadership Training Program
- Associate or Rotational Training Program
- Mentor Program
Diversity and Inclusion
- Diversity, Equity, and Inclusion Program
- Employee Resource Groups (ERG)
Company Videos
Hear directly from employees about what it is like to work at TikTok.