61 jobs for "Security Engineer - Incident Response"

Principal Cybersecurity Engineer

At Leidos - McLean

Posted on Oct 15

View job Apply on company site

Cyber Security Engineer (SME)

At Leidos - Bethesda

Posted on Oct 15

View job Apply on company site

DevSecOps Engineer

At Leidos - Lorton

Posted on Oct 7

View job Apply on company site

Application/Product Security Engineer Graduate (Security BP) - 2027 Start

At TikTok - Sydney

Posted on Sep 18

View job Apply on company site

Senior Site Reliability Engineer - Apple Information Security

At Apple

Posted on May 28

View job Apply on company site

IT Security Tools Operations Engineer

At TikTok - San Jose

Posted on Aug 7

View job Apply on company site

IT Security Tools Operations Engineer

At TikTok

Posted on Aug 6

View job Apply on company site

Senior Software Engineer, Identity Security (Golang/Swift)

At Apple - Austin

Posted on Oct 19

View job Apply on company site

Senior Software Engineer, Identity Security (Golang/Swift)

At Apple - Austin

Posted on Oct 19

View job Apply on company site

DevSecOps Engineer

At Leidos - Oklahoma City

Posted on Oct 7

View job Apply on company site

Senior DevSecOps Engineer

At Leidos - Oklahoma City

Posted on Oct 7

View job Apply on company site

AI Security Analysis Engineer Graduate (TikTok Shop-Security) - 2027 Start

At TikTok

Posted on Aug 3

View job Apply on company site

Cybersecurity Engineer SME

At Leidos - Bethesda

Posted on Jun 16

View job Apply on company site

DevSecOps Engineer

At Leidos - Lorton

Posted on Oct 7

View job Apply on company site

DevSecOps Engineer

At Leidos - Oklahoma City

Posted on Oct 7

View job Apply on company site

Real Time Payments - Application Support L1

At Mastercard

Posted on Oct 15

View job Apply on company site

Data Engineer Senior (Python/SQL)

At PNC Financial Services Group - Lakewood

Posted on Nov 2

View job Apply on company site

Security Engineer 4 (SWG, Remote Access)

At Capital One - Remote / Flexible

Posted on Oct 21

View job Apply on company site

Senior Software Engineer - Food

At Cargill - Bengaluru

Posted on Oct 28

View job Apply on company site

IND Red Team Engineer, Malware Developer, Security

At The Hartford - Hyderabad

Posted on Nov 5

View job Apply on company site

TikTok

IT Security Tools Operations Engineer

San Jose$111,600 – $223,200Posted Aug 7, 2026

Apply on company site View full job

Why you should apply for a job to TikTok:

4.5/5 in overall job satisfaction
4.5/5 in supportive management
100% say women are treated fairly and equally to men
100% would recommend this company to other women
100% say the CEO supports gender diversity

Ratings are based on anonymous reviews by Fairygodboss members. See all reviews ›

Responsibilities

IT Security team is responsible for global enterprise IT cyber security, server security, endpoint security, application security construction, and protection. We work to improve overall IT security capabilities and security posture by providing security processes, security assessments, security operations, and security vulnerability management services. The team also supports IT teams and business departments across the organization in meeting their security requirements.

Responsibilities
- Security Tools Administration: Manage the day-to-day operations, configuration, and administration of enterprise IT security tools (including firewalls, IDS/IPS, EDR, SWG, VPN, DLP, Mail Gateways, and other security-related technologies).
- Performance & Health Monitoring: Proactively monitor the performance, health, and availability of security infrastructure; identify, troubleshoot, and resolve technical issues or anomalies to ensure continuous functionality.
- Lifecycle & Patch Management: Perform regular maintenance activities, including updates, patches, upgrades, and configuration fine-tuning to ensure systems remain secure and up to date.
- Policy & Rule Optimization: Collaborate with IT and cross-functional security teams to define, implement, and optimize security tool configurations, policies, and rules to align with organizational security requirements and industry best practices.
- Compliance & Auditing: Conduct routine audits and compliance assessments of security tools to verify alignment with regulatory standards and internal security policies.
- Evaluation & Deployment: Participate in the evaluation, proof-of-concept (PoC) testing, selection, and implementation of new security tools and technologies to continuously enhance the overall security posture.
- Incident Response & Log Analysis: Review security logs and reports to identify patterns or anomalies that may indicate potential security breaches; respond to and resolve security incidents in a timely manner.
- Documentation & SOPs: Assist in developing and maintaining comprehensive security documentation, including standard operating procedures (SOPs), user guides, and knowledge base articles to facilitate effective tool utilization and support.
- Training & Support: Provide technical support and training to end-users and other IT teams on the proper usage and maintenance of security tools.
- Cross-Functional Collaboration: Partner with vendors, internal stakeholders, and cross-functional teams to ensure security policies and procedures are followed and technical issues are resolved efficiently.
- Operational Flexibility: Support operational needs, which may require flexible working hours, shift schedules, or weekend/holiday coverage, while maintaining a standard 5-day in-office work week.

Qualifications

Minimum Qualification(s)
- Bachelor's degree in Computer Science, Cyber Security, Information Technology, Engineering, or a related technical field.
- 4+ years of hands-on experience in enterprise security engineering, IT security operations, endpoint security engineering, network security engineering, or security tools administration.
- Experience owning production security platforms, including deployment, configuration, service health and capacity/performance monitoring, operational support, change management, upgrades, patching, optimization, incident troubleshooting, and maintaining service availability.
- Hands-on experience with enterprise security technologies such as EDR/AV, SIEM, IDS/IPS, VPN, SWG, CASB, firewalls, vulnerability scanners, or endpoint management platforms, including agent/client rollout, policy configuration, health monitoring, version upgrades, and issue remediation.
- Programming or scripting ability, such as Python, Bash, PowerShell, or API-based automation, with experience automating repetitive security operations or security tool administration tasks.
- Strong understanding of Windows, Linux, endpoint, network, and application security, with the ability to troubleshoot issues across agents, servers, networks, APIs, integrations, and backend infrastructure; perform root cause analysis; and coordinate remediation with infrastructure, endpoint, network, SOC, and vendor teams.

Preferred Qualification(s)
- Experience with security tool integrations and telemetry/log forwarding to SIEM, SOC, or incident response teams, including log source onboarding, connector configuration, parser/field mapping, and data pipeline validation.
- Experience with vulnerability validation, security control testing, or technical security assessments, with the ability to validate findings, understand attacker techniques, and translate results into security tool configuration or control improvements.
- Hands-on experience with tools such as CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, Carbon Black, Trend Micro, McAfee ePO, Symantec Endpoint Protection, Intune, Jamf, SCCM, Palo Alto, Fortinet, Check Point, Zscaler, Netskope, Splunk, Microsoft Sentinel, QRadar, Tenable, Qualys, or Rapid7.
- Experience designing or automating security tool health checks, endpoint compliance reporting, patch tracking, failed installation remediation, log pipeline validation, policy deployment, or security operations reporting.
- Relevant professional certifications such as CISSP, CISM, CISA, Security+, GCIH, GCIA, GCED, OSCP, or equivalent.

Job Information

[For Pay Transparency] Compensation Description (annually)

The base salary range for this position in the selected city is $111600 - $223200 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates:

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;

2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and

3. Exercising sound judgment.

Responsibilities

Qualifications

Qualifications

Minimum Qualification(s)
- Bachelor's degree in Computer Science, Cyber Security, Information Technology, Engineering, or a related technical field.
- 4+ years of hands-on experience in enterprise security engineering, IT security operations, endpoint security engineering, network security engineering, or security tools administration.
- Experience owning production security platforms, including deployment, configuration, service health and capacity/performance monitoring, operational support, change management, upgrades, patching, optimization, incident troubleshooting, and maintaining service availability.
- Hands-on experience with enterprise security technologies such as EDR/AV, SIEM, IDS/IPS, VPN, SWG, CASB, firewalls, vulnerability scanners, or endpoint management platforms, including agent/client rollout, policy configuration, health monitoring, version upgrades, and issue remediation.
- Programming or scripting ability, such as Python, Bash, PowerShell, or API-based automation, with experience automating repetitive security operations or security tool administration tasks.
- Strong understanding of Windows, Linux, endpoint, network, and application security, with the ability to troubleshoot issues across agents, servers, networks, APIs, integrations, and backend infrastructure; perform root cause analysis; and coordinate remediation with infrastructure, endpoint, network, SOC, and vendor teams.

Preferred Qualification(s)
- Experience with security tool integrations and telemetry/log forwarding to SIEM, SOC, or incident response teams, including log source onboarding, connector configuration, parser/field mapping, and data pipeline validation.
- Experience with vulnerability validation, security control testing, or technical security assessments, with the ability to validate findings, understand attacker techniques, and translate results into security tool configuration or control improvements.
- Hands-on experience with tools such as CrowdStrike, Microsoft Defender for Endpoint, SentinelOne, Carbon Black, Trend Micro, McAfee ePO, Symantec Endpoint Protection, Intune, Jamf, SCCM, Palo Alto, Fortinet, Check Point, Zscaler, Netskope, Splunk, Microsoft Sentinel, QRadar, Tenable, Qualys, or Rapid7.
- Experience designing or automating security tool health checks, endpoint compliance reporting, patch tracking, failed installation remediation, log pipeline validation, policy deployment, or security operations reporting.
- Relevant professional certifications such as CISSP, CISM, CISA, Security+, GCIH, GCIA, GCED, OSCP, or equivalent.

About TikTok

TikTok is the leading destination for short-form mobile video and our mission is to inspire creativity and bring joy.

Size: 10,000+ employees
Industry: Technology: Consumer Internet

View company profile