Senior Critical Incident Response Center (CIRC) Analyst (US) - DC

TikTok

Washington, DC

Why you should apply for a job with TikTok:

Employee well-being is supported via hybrid work, short-term counseling through our EAP and a premium subscription to Headspace.
We embrace diversity across all dimensions and provide employees with 9 employee resource groups globally, including our WOMEN ERG.
Comprehensive parental leave policy as well as fertility treatment through healthcare providers with a $20,000 lifetime maximum.

Get jobs straight to your inbox

Anonymous company reviews, virtual recruiting events, and a supportive community for women when you sign up.

#K9P2

Position summary

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices, including Los Angeles, New York, London, Paris, Berlin, Dubai, Mumbai, Singapore, Jakarta, Seoul, and Tokyo. As a Senior CIRC Analyst, you will be a member of TikTok's US Critical Incident Response Center (CIRC) team. You will belong to a team of strong people, processes, and technologies with the overarching goal of detecting and responding to threats targeting TikTok's US operations and infrastructure. The CIRC team is responsible for 24x7 monitoring of multiple security-related information sources to manage incidents related to cyber, privacy, and data protection for TikTok data, infrastructure, and products. The CIRC team will regularly survey the TikTok networks for signs of a breach, malware, or unauthorized access. Additionally, the CIRC team is responsible for developing and maintaining incident response plans, playbooks and procedures. Finally, the CIRC team will be responsible for data collection and analysis of Incident Response data. The CIRC analyzes disparate data sets when combined with threat information and other enrichment to identify incidents and drive appropriate responses to contain and minimize impact and restore normal operations. The analysis is used to ensure a consistent and coordinated response to ongoing threats ensuring TikTok can continue to operate safely and securely. Responsibilities: • Active participation and situational leadership in incident response activities. • Conduct technical analysis and assessments of security-related incidents, including malware analysis, packet-level analysis, and system-level forensic analysis. • Conduct analysis of network traffic and output from various network-centric technologies. • Collect and analyze disk & memory images with the intent of identifying information related to a security incident. • Identify major threats that target TikTok users or utilize company infrastructure • Develop incident response plans and procedures, including identification, remediation, containment, and eradication procedures • Provide input to cross-functional teams to ensure that log sources meet analyst needs and that sensors and collection devices are placed strategically throughout the environment • Work with Crisis Management to enable crisis procedures and execute when necessary • Synthesize technical details of critical incidents to executive management and provide immediate containment and eradication recommendations • Support the onboarding of new products, data, process, or tools by identifying requirements by integrating them into operations (processes, playbooks, and training) • Mentor and guide junior CIRC analysts to grow their incident response analysis skills • This position is part of a 24x7 operation and requires shift and/or on-call work Bachelors’ Degree or industry equivalent work experience in CyberSecurity with a focus on security analytics and incident response • At least 3-5 years of directly related experience in computer security incident handling • Experience with identifying and responding to advanced threats and threat actor TTPs • Excellent communication skills (verbal and written), ability to influence without authority. • Demonstrated teamwork and collaboration skills, in particular in leading or contributing to global and multi-functional teams. • Demonstrated time management, problem-solving, effort prioritization and interpersonal skills • Work well under pressure and within constraints to solve problems and meet objectives • Excellent fundamental knowledge of industry-standard frameworks (e.g., MITRE ATT&CK) • Strong analytical/problem-solving skills and cross-functional expertise across multiple IT operational and security disciplines • Ability to communicate technical concepts to a broad range of technical and non-technical staff • Must possess a high degree of integrity, be trustworthy, and have the ability to lead and inspire change Preferred Qualifications • GCIA, GCIH, GREM or applicable experience in the Information Security field • One or more programming/scripting languages (e.g., Perl, Java, Python, etc.) • SQL - Experience writing and executing SQL queries • Experience in performing or overseeing static/dynamic malware analysis • Experience in performing digital forensics for incident response • Strong Operating System Administration skills including conceptual knowledge of OS internals and experience with core service types • Strong experience with UNIX/Linux and Windows environments TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We believe individuals shouldn't be disadvantaged because of their background or identity, but instead should be considered based on their strengths and experience. We are passionate about this and hope you are too. TikTok is committed to providing reasonable accommodations during our recruitment process. If you need assistance or accommodation, please reach out to us at [email protected]

What are TikTok perks and benefits

Lactation facilities

Fertility

Unconscious bias training

Networking

Succession planning

Diversity recruiting

Diversity performance

Short term disability

Paid paternity

Paid maternity

Paid adoptive

About the company

TikTok

Industry: Technology: Consumer Internet

As the leading destination for short-form mobile video, our platform helps people around the world become a part of a global community. In a world that feels more divided than ever, we are here to inspire creativity and bring joy. We do this by embracing change, thriving in ambiguity, and always looking for solutions.

Why you should apply for a job with TikTok:

Employee well-being is supported via hybrid work, short-term counseling through our EAP and a premium subscription to Headspace.
We embrace diversity across all dimensions and provide employees with 9 employee resource groups globally, including our WOMEN ERG.
Comprehensive parental leave policy as well as fertility treatment through healthcare providers with a $20,000 lifetime maximum.