Security Engineer – Detection & Response

About the role

As a Security Engineer in the Detection & Response team of TikTok’s Global Security Organization, you will help protect the platform used by over a billion users worldwide. You will design and implement data‑driven detection capabilities, work with cross‑functional teams, and apply cutting‑edge AI/ML techniques to stay ahead of emerging threats.

Key responsibilities

• Research emerging cyber threats, vulnerabilities and exploits relevant to TikTok’s infrastructure and products.
• Develop new detection methods, signals and data‑driven approaches to identify security threats.
• Lead cross‑functional projects to design and implement security controls and detection tools.
• Conduct in‑depth analysis of security incidents and support incident response investigations.
• Perform gap assessments to improve tooling capabilities and detection strategy.
• Build and optimise automations to scale detection and response.
• Use threat modelling and log analysis to create behavioural detections.
• Collaborate with stakeholders to discover new logging sources and detection opportunities.
• Apply AI and machine‑learning techniques to develop innovative security solutions.

Required profile

• Strong understanding of security fundamentals across networks, hosts, applications and containers.
• Hands‑on experience with at least one security product such as WAF, HIDS, NTA, EDR or DLP.
• Familiarity with industry frameworks like MITRE ATT&CK and NIST CSF.
• Proficiency in one or more programming languages for log analysis and detection development.
• Experience with Detection‑as‑Code pipelines and integration with security tooling.

Required skills

• Security product expertise (WAF, HIDS, NTA, EDR, DLP)
• MITRE ATT&CK framework
• NIST Cybersecurity Framework
• Programming/scripting for log analysis (e.g., Python, Bash)
• Detection‑as‑Code pipeline development
• Threat modelling and behavioural detection
• AI/ML applied to security