Senior Developer, Content Assurance

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk. In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 2 to 3 days a week, as directed by their manager. We regularly review our hybrid work model, and the specific requirements may change at any time.

TikTok is seeking a Senior Developer to join our Global Security Organization with a focus on the Content Assurance Program. As part of the GSO Content Assurance Team, you'll build applications/tools to support highly technical security initiatives that enable cross-functional security and privacy at TikTok.

Responsibilities
- Conduct security-oriented code reviews of the different languages used in content creation and management. Such reviews should establish that code is clean, secure, and does not contain security vulnerabilities
- Develop, execute, and enhance data scanning tools and capabilities (e.g., scripts, jobs, functions) to automate iterative end-to-end processes for scanning training data for ML models using scalable, reusable, and configurable frameworks/methodologies
- Collaborate with both technical and business teams to gather functional requirements for in-house and external technologies to identify sensitive information and ensure appropriate data protection controls are in place
- Define metrics and create/maintain dashboards for measuring and reporting key performance indicators (e.g., coverage, findings and remediations)
- Execute on program activities that meet the organization's information security standards, business needs, and regulatory requirements
- Implement and promote secure coding practices within the team by encouraging coding techniques that prioritize security and mitigate vulnerabilities
- Work closely with security, privacy, and engineering leaders to understand organizational priorities and to sequence and/or deconflict projects accordingly
- Ensure the code complies with internal security policies and external regulations and standards and provide guidance on enhancing security compliance
- Document findings from code reviews, security incidents, and other relevant information in detail by maintaining clear and accurate records of code monitoring, testing, and incident resolution activities
- Generate reports that detail the status of the content assurance program, notable incidents, and the overall security of the programming aspect

Qualifications

Minimum Qualifications
- Strong understanding of database technologies and querying (e.g., SQL, NoSQL) including relational/non-relational databases and big data (e.g., MySQL, Hive, Hadoop/HDFS, Redis, Graph, Mongo), message queues (e.g. Kafka, RocketMQ, etc.), Elasticsearch, and cloud services. Expert with building process automation and solution development and scripting using multiple programming languages (e.g., Python, Go) and APIs, and strong debugging ability in a distributed, cloud environment
- Experience with LLM prompt tuning, data analysis using Python pandas library and RegEx regular expressions
- Strong understanding of Linux environments, command line interfaces, and cloud native technologies, including containers, object storage, Kubernetes, service discovery and mesh, and significant experience with public/hybrid/private cloud
- Demonstrate ability to quickly assimilate to new knowledge and technologies, and remain current on new developments in cybersecurity capabilities and industry knowledge
- Experience collaborating with cross-functional and cross-regional teams to meet strategic and tactical objectives as well as serve as an individual contributor
- Experience operating autonomously and working across multiple teams, with stakeholders in different disciplines across time zones, with an ability to demonstrate critical thinking and thought leadership, work in a fast-paced environment, and manage multiple tasks simultaneously
- Experience working for a company with a global footprint and having analytical and problem-solving experience with large-scale systems

Preferred Qualifications
- Bachelors' Degree in Cybersecurity
- 5 years of experience in cybersecurity or other related fields

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

TikTok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://shorturl.at/cdpT2

Job Information

[For Pay Transparency] Compensation Description (annually)

The base salary range for this position in the selected city is $147200 - $269800 annually.

Compensation may vary outside of this range depending on a number of factors, including a candidate's qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.

For Los Angeles County (unincorporated) Candidates:

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;

2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and

3. Exercising sound judgment.