Threat Research Analyst, Global E-commerce (Governance and Experience)

l e-commerce business is a content e-commerce venture with an international short video product as its carrier. Our commitment is to become the first choice for users seeking to discover and purchase good products at affordable prices. The Global e-commerce business team aims to provide users with more tailored, active, and efficient consumption experiences, enabling merchants to receive stable and reliable platform services in various scenarios, such as live e-commerce and short video content e-commerce, thereby making more affordable and high-quality products easily accessible and improving lives.

E-Commerce's Governance and Experience is a global team responsible for ensuring a safe and trustworthy marketplace not only for our buyers but also for our sellers and creators. We continually work on areas such as risk detection abilities, fairness, and sustainability of the E-Commerce ecosystem, content and commodity quality, and friction-free experiences to drive improvement.

Responsibilities:

• Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to our infrastructure and products.
• Research new methods and technologies to detect cyber threats, identify signals, and design data-driven approaches that use these signals to identify security threats and security breaches.
• Bring insight into all aspects of modern security issues to our products and rapidly developing prototypes for mitigations.
• Collaborate with cross-functional software engineering teams in developing products and services for delivering security assurance.
• Create and maintain use cases for intelligence monitoring, develop and deliver high-quality written products and oral intelligence briefings.
• Identify and assess emerging risks, including analysis of deep and dark web data.
• Mentor junior engineers to plan and conduct threat research.
• Apply cutting-edge AI technologies/Machine Learning (ML) to develop innovative AI solutions for security.

Qualifications

• Bachelor's or higher degree in Computer Science, Information Technology, Programming & System Analysis, Science (Computer Studies) or related discipline.
• 2 years+ of related experience.
• Passion and extremely self-motivated about security research, especially to discover real-world security problems, and addressing in-the-wild security threats. Deep understanding of vulnerability analysis and discovery as well as exploitation process and techniques.
• Research experience in attacks and mitigation methods.
• Research experience in two or more of the following: threat intelligence, IAM, key management systems, data security, application security, web application and browser security, security protocols, operating system internals and hardening (e.g., Windows, Linux, OS X, Android), network security, vulnerability management, penetration testing, or applied cryptographic concepts.
• Deep domain knowledge about AI technologies and/or information security.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.