Responsibilities

Team Introduction: The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates. Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience. As part of the Threat Detection and Response function, the Detection Engineering team focuses on improving our detection capabilities to identify malicious threats. This can involve data engineering to enrich and scale the pipelines, or analysing adversarial tradecraft and developing signals or creating tools to improve our Detection and Response capabilities. The data engineer for security builds and maintains robust data pipelines that ensure security data and logs are collected, processed, and produced in a sound and legally defensible manner. - Big data management: Architect and manage large-scale data storage solutions like data lakes and warehouses to handle petabytes of data from end points, servers, network devices, and cloud environments. - Data management and loading: Ingest, integrate, and normalize data into SOC or other platforms to analyze. This includes handling various native file formats and metadata. - Workflow automation: Build and maintain data pipelines to automate and orchestrate data processing, including data ingestion, processing, and production, ensuring smooth data flow between components and services; This increases efficiency and reduces manual errors. - Create requirements, work with stakeholders to design, implement, and deploy security tools

Qualifications

Minimum Qualifications: - Applicable experience in Backend Development. SRE, Data Engineering, Programming etc - Programming: Strong proficiency in Python，Go for building automated data pipelines and scripts. - Database expertise: In-depth knowledge of SQL, as well as NoSQL databases, and experience with database architecture and data modeling. - Big data frameworks: Hands-on experience with big data and streaming frameworks such as Apache Spark, Kafka, or Flink, capable of handling high-throughput and large-scale data processing. - Cloud computing: Proficiency with cloud platforms such as AWS, Azure, and Google Cloud, which are often central to large-scale data investigations. - Performance & Reliable Optimization: Strong ability to perform system performance tuning, availability monitoring, and issue investigation; experienced in collaborating with SRE team to enhance reliability. Preferred Qualifications: - Experience in at least one of the following security products: SIEM/SOAR experience, WAF, HIDS, NTA, EDR or DLP, with practical experience in strategy development and knowledge of industry best practices/ frameworks (MITRE ATT&CK, NIST CSF, etc). - Experience with large-scale data environment cost optimization,data pipeline,data lineage visualization, or related projects. - Familiar with monitoring frameworks, like Prometheus, Grafana, and the ELK Stack. - Possess certifications in Data Engineering,Cloud Data,Spark, or Kafka.

Job Information