Sr. Infrastructure Security Specialist - Enterprise to Edge Security, Global Security Organization

TikTok
San Jose
Workplace: OnsiteFull timeFunction: Solutions Engineering & Sales EngineeringExperience: 5+ yearsEducation: mastersSkills: ["Risk assessment","Automation","Collaboration","Attention to detail"]

Design and evolve security architecture and control frameworks across TikTok’s enterprise-to-edge infrastructure. Own validation of technical controls and defense-in-depth across hybrid and multi-cloud environments, embedding automated scanning, policy-as-code, and approval gates into CI/CD. Build scalable IaC frameworks to enforce security baselines, lead threat modeling and architecture reviews, and mature cloud network security (VPC, micro-segmentation, firewall policies) with centralized logging and audit coverage.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
TikTok
TikTok
1 month ago

Sr. Infrastructure Security Specialist - Enterprise to Edge Security, Global Security Organization

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 9 hours agoStatus: Live

Job Summary

Design and evolve security architecture and control frameworks across TikTok’s enterprise-to-edge infrastructure. Own validation of technical controls and defense-in-depth across hybrid and multi-cloud environments, embedding automated scanning, policy-as-code, and approval gates into CI/CD. Build scalable IaC frameworks to enforce security baselines, lead threat modeling and architecture reviews, and mature cloud network security (VPC, micro-segmentation, firewall policies) with centralized logging and audit coverage.
Location: San Jose
Workplace: Onsite
Employment Type: Full time
Job Function: Solutions Engineering & Sales Engineering
Seniority: Mid level

Key Responsibilities

  • •Own security architecture and control frameworks across hybrid/multi-cloud infrastructure, including self-built data centers, OCI, AWS, Azure, and GCP.
  • •Implement defense-in-depth controls across IaaS, PaaS, containers, and IAM for infrastructure.
  • •Lead threat modeling and architecture reviews to identify and mitigate risks before production.
  • •Embed automated security scanning, policy-as-code, and approval gates into CI/CD pipelines.
  • •Build scalable IaC frameworks to enforce security baselines and prevent configuration drift, including maturing cloud network security (VPC, micro-segmentation, firewalls) with centralized logging and audit coverage.

Key Requirements

  • •Design and implement security controls across hybrid and multi-cloud environments (e.g., data centers, AWS, Azure, GCP, OCI).
  • •Hands-on experience with cloud security tooling and concepts such as CSPM, CNAPP, CASB, and DLP.
  • •Experience with threat modeling, risk assessment methodologies, and security validation techniques.
  • •Ability to automate security control implementation and validation using tools or scripting.
  • •Working knowledge of security frameworks and regulations (e.g., NIST CSF, ISO 27001; GDPR, SOX).
Experience:5+ yearsCybersecurityCloud securityInfrastructure security
Education:Master's
Skills:Risk assessmentAutomationCollaborationAttention to detail
Certifications:CISSPCCSPCCSK
Tech Stack:AWSAzureGCPOCICSPMCNAPPCASBDLPNIST CSFISO 27001GDPRSOXCI/CDPolicy-as-codeOPA/RegoSentinelIaCVPCMicro-segmentationFirewall policies

Company Brief

TikTok
Short-form video platform that lets users create, share, and discover entertainment content through algorithmic recommendations. It also offers advertising and creator tools for brands, influencers, and businesses.
Industry: Digital Media
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Headquarters: Singapore, Singapore
Founded: 2016
WebsiteLinkedIn