Data Loss Prevention Senior Specialist - Washington DC, Mountain View, LA or NYC

TikTok

Washington, DC

Why you should apply for a job with TikTok:

Employee well-being is supported via hybrid work, short-term counseling through our EAP and a premium subscription to Headspace.
We embrace diversity across all dimensions and provide employees with 9 employee resource groups globally, including our WOMEN ERG.
Comprehensive parental leave policy as well as fertility treatment through healthcare providers with a $20,000 lifetime maximum.

Get jobs straight to your inbox

Anonymous company reviews, virtual recruiting events, and a supportive community for women when you sign up.

#NN9V

Position summary

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices, including Los Angeles, New York, London, Paris, Berlin, Dubai, Mumbai, Singapore, Jakarta, Seoul, and Tokyo. Our Global Security function provides services to TikTok's US market using four principles that guide our strategic and tactical operations. First, we champion trust and transparency, leading the charge in organizational transparency and execution of security and privacy capabilities that drive customer trust. Second, we are a business catalyst and enabler, embodying the DNA of technical innovation. Third, we drive risk-informed and empowered decision-making, giving our business leaders the information needed to make key decisions. Finally, we proactively identify and reduce risk while enabling innovative product development – to consistently build sustainable world-class and trusted security capabilities. As a direct report to the Lead of US Data Loss Prevention Operations, your primary focus will be designing, implementing and maintaining TikTok's DLP technology stack. This role requires cross-functional coordination with a team of cyber, privacy, engineering, and data protection analysts to protect data in accordance with relevant geographical regulations, contractual commitments, and confidentiality requirements. Additionally, this role will work closely with the DLP Analysts to incorporate the technical aspects of identified business use cases. The candidate must be experienced in enterprise DLP technology deployments and configurations, and have an advanced understanding of DLP strategy, components, and capabilities. The candidate must also have the ability to communicate well, participate in coordinating response and defensive actions as it relates to data protection efforts and disseminate security information as appropriate in support of TikTok's critical business, go to market, and operational infrastructure needs. Responsibilities - Design, implement, and maintain Data Loss Prevention (DLP) technology solutions to protect TikTok data across servers, endpoints, and cloud environments - Design and maintain technical architecture diagrams to support DLP landscape - Configure and deploy infrastructure as needed to meet DLP program goals - Interface with Global Security colleagues to ensure proper maintenance of DLP infrastructure (baseline hardening, system patching, back-ups, etc.) - Design and configure DLP endpoint agent software packages - Establish relationships with key stakeholders across multiple business units to develop, deploy, and operate effective DLP solutions - Manage the end-to-end process of technology integration to create a comprehensive DLP program. For example, - Design and manage the integration of DLP technology with SIEM, UBA, and other relevant technologies - Investigate and resolve incidents that involve theft or loss of consumer data, employee data, business sensitive data, and/or intellectual property - Create and maintain technical documentation Knowledge and Skills: - Excellent analytical and problem-solving skills - Excellent communication skills (verbal and written), ability to influence without authority - Ability to balance risks in ambiguous and complex situations - Demonstrated teamwork and collaboration skills, in particular in leading or contributing to global and multi-functional teams - Highly motivated to contribute and grow within a complex area of emerging importance - Expert level understanding of Windows and Linux operating systems - Familiarity with configuration and deployment of cloud based infrastructure - Expert level understanding of data security tools, processes, and procedures - Expert level understanding of the Data Lifecycle and protection of data throughout - Working knowledge of encryption principles - Experience and knowledge of IP and Source Code protection tools, policies, and procedures - Experience using one or more programming/scripting languages (e.g., Python, Go, Java, etc.) Minimum Qualifications: - Bachelors’ Degree or industry equivalent work experience in cybersecurity, security architecture, and/or engineering in a converged security program - 3+ years experience with designing, deploying, and maintaining a large-scale DLP program - Experience working with enterprise data protection technologies such as DLP (both Endpoint and Network), User Behavior Analytics (UBA), and Cloud Access Security Brokers (CASB) - Ability to effectively communicate the business value of the DLP program to executive stakeholders - Ability to work as a member of a cross-functional team focused on aligning and supporting the organization's security goals - Ability to quickly assimilate to new knowledge and remain current on new developments in cybersecurity capabilities and industry knowledge - In-depth experience in designing and deploying data protection technologies and controls in enterprise-class organizations, including the following: - Microservices architecture - Data leakage/content monitoring and filtering - Logging, monitoring, and security event management - Secure information storage - Data classification, labelling, and data usage - Identification of data security risks Preferred Qualifications: - CISSP, SSCP, CAP, CCSP, CISM or applicable experience in the Information Security field - Familiarity with source code management tools (e.g., Github, Bitbucket) - Familiarity with securing data across SaaS and IaaS cloud platforms (e.g., AWS, Google Cloud Platform) - Familiarity with database technologies such as Graph databases, Kafka queues, Redis, Mongo and other non-relational databases TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We believe individuals shouldn't be disadvantaged because of their background or identity, but instead should be considered based on their strengths and experience. We are passionate about this and hope you are too. TikTok is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to us at [email protected]

What are TikTok perks and benefits

Lactation facilities

Fertility

Unconscious bias training

Networking

Succession planning

Diversity recruiting

Diversity performance

Short term disability

Paid paternity

Paid maternity

Paid adoptive

About the company

TikTok

Industry: Technology: Consumer Internet

As the leading destination for short-form mobile video, our platform helps people around the world become a part of a global community. In a world that feels more divided than ever, we are here to inspire creativity and bring joy. We do this by embracing change, thriving in ambiguity, and always looking for solutions.

Why you should apply for a job with TikTok:

Employee well-being is supported via hybrid work, short-term counseling through our EAP and a premium subscription to Headspace.
We embrace diversity across all dimensions and provide employees with 9 employee resource groups globally, including our WOMEN ERG.
Comprehensive parental leave policy as well as fertility treatment through healthcare providers with a $20,000 lifetime maximum.