Cybersecurity Engineer - Global E-commerce (Governance and Experience)

l e-commerce business is a content e-commerce venture with an international short video product as its carrier. Our commitment is to become the first choice for users seeking to discover and purchase good products at affordable prices. The Global e-commerce business team aims to provide users with more tailored, active, and efficient consumption experiences, enabling merchants to receive stable and reliable platform services in various scenarios, such as live e-commerce and short video content e-commerce, thereby making more affordable and high-quality products easily accessible and improving lives.

E-Commerce's Governance and Experience is a global team responsible for ensuring a safe and trustworthy marketplace not only for our buyers but also for our sellers and creators. We continually work on areas such as risk detection abilities, fairness, and sustainability of the E-Commerce ecosystem, content and commodity quality, and friction-free experiences to drive improvement.

Responsibilities:

• Collaborate with cyber security and business partners across Global E-Commerce to gather information to facilitate and complete threat models.
• Understand and safely utilize various open-source penetration testing tools and, when appropriate, emulate hacker tactics, techniques, and procedures.
• Respond to security violations, potential vulnerabilities, and alerts from detection systems.
• Stay up-to-date on 0-day exploits for tech stacks we use.
• Communicate with stakeholders (technical and non-technical) both verbally and in writing.
• Research, design, and develop computer and network software or specialised utility programs.
• Analyse user needs and develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.
• Update software, enhances existing software capabilities, and develops and direct software testing and validation procedures.

Qualifications

• Bachelor's or higher degree in Computer Science, Information Technology, Programming & System Analysis, Science (Computer Studies) or related discipline.
• At least 5 years of experience with information security applications and Cloud Security.
• Proficiency in conducting information security investigations and remediations is essential.
• Experience in assessing APT threats, Penetration Testing, Vulnerability Management, attack methodologies, forensics analysis techniques, attack surface comprehension, Cyber Threat Emulation operations and research, identification, and/or verification of new APT TTP is required.
• Possess a solid understanding of common web application vulnerabilities, exploitation techniques, and remediation options.
• Being detail-oriented and having strong problem-solving skills are essential, along with the ability to analyse potential future issues.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.