TikTok's Security teams have a lot to look forward to in 2023! Working quickly and at scale to protect our global community, we're seeking talented people to tackle security challenges in an exciting, fast-paced environment. We spoke to Kim Albarella and Caitlin Sarian, two leaders within our Global Security Organization (GSO), and the US Data Security (USDS) team's Jeff Louisma about their experiences at the company and what makes them love working at TikTok.
Tell us about your background and what led you to choose a career at TikTok.
Kim: Looking back on my career – even as far back as my first job at a pizza restaurant – I was always focused on getting better, learning more, taking on a new challenge, and maximizing every hour I worked.
Before TikTok, I held various roles in security at a large human resources company, and helped mature the organization's security client-facing operations and risk program. After almost 11 years there, I was ready for the next challenge. I was eager to join a high-tech start-up, and when I learned about the opportunity to lead TikTok's security integrated risk program, I knew the culture and focus would be a great fit. TikTok knows that staying ahead of next-generation cyberthreats requires continuously strengthening the security of the platform. That's why we continually work to enhance our security standards and collaborate with industry-leading experts to test our defenses. Since starting with the company in September 2021, my scope has steadily expanded. Today, I'm the interim head of global security, and I love this job.
Jeff: I've always been enamored by technology, specifically how attackers break into systems. More recently I've spent time building resilient security teams and protecting businesses. I was looking for something challenging and inspiring when the opportunity to become head of cyber and data defense at TikTok came knocking. This position definitely exceeded all of my wildest hopes. The team here is doing groundbreaking work, and I wake up every morning excited about what I will learn and the impact I will have. Our work directly protects my friends, family, and millions of Americans who love TikTok. There's no feeling more rewarding than having a direct and positive impact on my loved ones and my country.
Caitlin: I was an aerospace mechanical engineer before becoming a cybersecurity, data protection, and privacy professional. As a consultant for almost 10 years before joining TikTok, I was continually reminded that I would have to be truly passionate about a company to go "in house." To say I'm passionate about TikTok is an understatement. From day one, I had three goals: get more people into cybersecurity, empower women in STEM fields, and teach people how to stay safe online. I never thought my small idea would grow into what it has.
Tell us about your role at TikTok.
Kim: Security is a critical part of maintaining the integrity and safety of our platform. I'm responsible for the Global Security Organization, which helps keep TikTok up and running safely and securely. To do that, we invest in people, processes, and technology to hold ourselves accountable to the highest standards of data protection so our community cacreate, discover, be entertained, and share what they love with confidence.
In line with industry practices, we collect information that users choose to provide to us and information that helps the platform function, operate securely, and improve the user experience. Our team employs a series of robust controls, safeguards like encryption, and authorization approval protocols to ensure that data is only accessed by those that need it to allow our business and our service to function.
I love this role because it makes a direct difference to over a billion people and allows them to enjoy the entertainment that our platform provides. On a more personal basis, I love working for a company that is so relevant to the daily lives of my family and friends.
Caitlin: My role is focused on bringing awareness to important cybersecurity topics — both internally among our employees and externally to our customers and community. I also developed and oversee a process to support cross-functional teams in responding to cybersecurity related inquiries or questions from diverse stakeholders, spanning regulators, legislators, media, and customers. One of the reasons TikTok is so powerful is that it allows people like me to reach so many of my goals, gain amazing experiences, and positively impact the lives of others.
What were some of the team's biggest highlights in 2022, and what was your role in them?
Kim: One of our biggest achievements was further developing our ability to programatically assess the company's risks in a consistent and sustainable fashion, which also plays an important role in supporting prioritization of work.
At TikTok, we're always focused on the safety, security, and privacy of our global community. To stay ahead of next-generation threats, we've been focused on strengthening our global security organization to enable best-in-class security operations at scale.
Over two years ago, we set out a commitment to chart a new course for our industry when it comes to data security. It's an energizing challenge to help scale a global company while balancing a data governance strategy that is based on aligning with local requirements and values. We also take an integrated and aligned approach to anticipate and address vulnerabilities in real time, while we work to protect the data of our global community and defend our platform. This approach helps us to provide a comprehensive view of how our business and community intersects with the world, both on and off the platform.
Our team's mission is about more than protecting against threats. It's also about ensuring that the platform is available, reliable, and trusted for our community to enjoy exciting global live events like World Cup 2022 and the FIBA 3x3 World Tour Paris Masters 2022.
Jeff: Hiring! I've been able to hire some incredible people who knock it out of the park every day. I'm humbled by their skills and motivated to enable them to produce great work. In May, we announced that we recently stood up a new division called US Data Security (USDS) to bring heightened focus and governance to our ongoing efforts to strengthen our data protection policies and protocols, further protect our users, and build confidence in our systems and controls in the US. The creation of USDS was an important milestone in the goals we laid out a few years ago: limiting access to user data across regions. That work is only made possible by our amazing team, including the newest additions who joined the company this year.
What advice would you give to someone who is interested in joining TikTok?
Kim: My advice is twofold: First, know the platform. Use it, understand it, and be passionate about it. TikTok is a very unique platform and company. I expect anyone interviewing for a role here to be an avid user who understands the its features, and who will work hard to protect the joy that TikTok brings to our global community. Secondly, be flexible – TikTok is a multinational, high-tech company that is still growing. Our product, organization, and needs are constantly changing as we grow. That requires adapability, perseverance, and resilience.
Jeff: Don't limit yourself to only what has been done in the past. TikTok thrives on people who are willing to think outside the box and aim for the highest standards, not just accepting what everyone else does.
Caitlin: If you want to work at a fast-paced, highly innovative and impactful company, this is the place for you.
Are you interested in growing and improving TikTok's security operations? Make sure to browse openings here and follow us on LinkedIn, Life at TikTok, and our Life At TikTok Instagram for the latest updates. We can't wait to meet you!
- Tags
- USDS
- Cybersecurity
- Trust and Safety
