Security Engineer – Detection & Response

About the role

The Global Security Organization at TikTok is looking for a Security Engineer focused on Detection & Response. You will help protect the platform used by over a billion people, ensuring data safety, privacy, and compliance with global regulations.

Key responsibilities

• Research emerging cyber threats, vulnerabilities, and exploits relevant to TikTok’s infrastructure and products.
• Develop new detection methods, data‑driven approaches, and security controls to identify and mitigate attack surfaces.
• Lead cross‑functional projects to design and implement security tools that enhance detection capabilities.
• Conduct in‑depth analysis of security incidents and support incident response investigations.
• Perform gap assessments, improve tooling, and optimize automation for scaling detection and response.
• Utilize threat modeling, log analysis, and behavioral detection techniques.
• Collaborate with stakeholders to discover new detection sources and logging capabilities.
• Apply AI and Machine Learning techniques to create innovative security solutions.

Required profile

• Strong understanding of security fundamentals across networks, hosts, applications, and containers.
• Experience with at least one security product such as WAF, HIDS, NTA, EDR, or DLP.
• Familiarity with security frameworks like MITRE ATT&CK and NIST CSF.
• Proficiency in one or more coding languages for log analysis and detection strategy development.
• Knowledge of Detection‑as‑Code pipelines and integration with in‑house security tools.

Required skills

• Web Application Firewall (WAF)
• Host‑based Intrusion Detection System (HIDS)
• Network Traffic Analysis (NTA)
• Endpoint Detection & Response (EDR)
• Data Loss Prevention (DLP)
• MITRE ATT&CK framework
• NIST Cybersecurity Framework (CSF)
• Coding languages (e.g., Python, Java, etc.)
• Detection‑as‑Code pipelines
• Machine Learning / AI for security