Senior Privacy Engineer (RED team) - TikTok PDPO

TikTok
San Jose
Workplace: OnsiteFull timeFunction: Administration & Executive AssistanceSkills: ["Independent execution","Prioritization","Communication","Cross-functional collaboration","Threat modeling","Secure code review"]

Drive end-to-end privacy red team assessments within the Privacy and Data Protection Office, translating privacy concepts (consent, data sharing, minimization, retention, sovereignty) into concrete adversarial scenarios. Perform hands-on penetration tests and deep security/code reviews to bypass user privacy expectations, identify exploitable issues across the data lifecycle, and research emerging privacy threats. Partner with engineering and product to embed privacy-preserving controls across the SDLC and scale testing via tooling and automation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
TikTok
TikTok
1 month ago

Senior Privacy Engineer (RED team) - TikTok PDPO

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 19 hours agoStatus: Live

Job Summary

Drive end-to-end privacy red team assessments within the Privacy and Data Protection Office, translating privacy concepts (consent, data sharing, minimization, retention, sovereignty) into concrete adversarial scenarios. Perform hands-on penetration tests and deep security/code reviews to bypass user privacy expectations, identify exploitable issues across the data lifecycle, and research emerging privacy threats. Partner with engineering and product to embed privacy-preserving controls across the SDLC and scale testing via tooling and automation.
Location: San Jose
Workplace: Onsite
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Threat model privacy concepts into concrete adversarial scenarios and design red team engagements.
  • •Conduct hands-on penetration tests of internal and external systems with a focus on privacy expectation bypass from an external attacker perspective.
  • •Identify exploitable issues across the data lifecycle and demonstrate end-to-end impact.
  • •Research emerging privacy threats and develop new testing methodologies and abuse cases.
  • •Partner with engineering and product to integrate privacy-preserving controls across the SDLC and scale assessments through tooling and automation.

Key Requirements

  • •Hands-on experience as an offensive penetration tester/red teamer.
  • •Demonstrated depth in application security and mobile security pentesting, including APT simulations and cloud systems.
  • •Experience performing manual secure code review on production codebases.
  • •Proven track record leading complex technical assessments end-to-end as an individual contributor, including threat modeling and technical reporting.
  • •Working knowledge of core privacy concepts (data minimization, sovereignty, data sharing, consent, privacy policies) and mapping major regulations (e.g., GDPR, CCPA) to technical controls.
Experience:Offensive securityApplication securityMobile securityRed teamingCloud securityPrivacy engineering
Skills:Independent executionPrioritizationCommunicationCross-functional collaborationThreat modelingSecure code review
Tech Stack:Offensive securityAppsecMobile securityPenetration testingRed team exercisesAPT simulationsCloud systemsMITRE ATT&CKScripting language

Company Brief

TikTok
Short-form video platform that lets users create, share, and discover entertainment content through algorithmic recommendations. It also offers advertising and creator tools for brands, influencers, and businesses.
Industry: Digital Media
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Headquarters: Singapore, Singapore
Founded: 2016
WebsiteLinkedIn