Senior Privacy Engineer (RED team) - PDPO (Singapore)

TikTok
Singapore
Full timeFunction: Administration & Executive AssistanceExperience: 5+ yearsSkills: ["Communication","Cross-functional collaboration","Independent execution","Prioritization","Secure code review"]

Drive TikTok’s Global Privacy Red Team within the Privacy and Data Protection Office, operating independently to assess privacy risks end-to-end. Threat model privacy concepts into adversarial scenarios, conduct hands-on penetration testing across internal and external systems, and identify exploitable issues across the data lifecycle. Research emerging privacy threats, develop new testing methodologies, integrate privacy-preserving controls across the SDLC, and scale assessments by building tooling and automation.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
TikTok
TikTok
1 month ago

Senior Privacy Engineer (RED team) - PDPO (Singapore)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 18 hours agoStatus: Live

Job Summary

Drive TikTok’s Global Privacy Red Team within the Privacy and Data Protection Office, operating independently to assess privacy risks end-to-end. Threat model privacy concepts into adversarial scenarios, conduct hands-on penetration testing across internal and external systems, and identify exploitable issues across the data lifecycle. Research emerging privacy threats, develop new testing methodologies, integrate privacy-preserving controls across the SDLC, and scale assessments by building tooling and automation.
Location: Singapore
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Sr. Manager level

Key Responsibilities

  • •Threat model privacy concepts into concrete adversarial scenarios and execute privacy red team engagements.
  • •Conduct deep technical assessments and penetration tests focused on bypassing user privacy expectations from an external attacker perspective.
  • •Identify exploitable issues across the data lifecycle, including internal data flows and data sharing with external parties, and demonstrate end-to-end impact.
  • •Research emerging privacy threats and develop new testing methodologies and abuse cases ahead of production impact.
  • •Partner with engineering and product teams to integrate privacy-preserving controls throughout the SDLC and translate findings into prioritized remediation guidance.

Key Requirements

  • •5+ years hands-on experience as an offensive penetration tester/red teamer.
  • •Demonstrated depth in application security and mobile security pentesting.
  • •Demonstrated depth in red team exercises, APT simulations, and cloud systems.
  • •Experience performing manual secure code review on production codebases.
  • •Track record leading complex technical assessments end-to-end as an individual contributor, including threat modeling, scoping, execution, and technical reporting.
Experience:5+ yearsOffensive securityApplication securityMobile securityRed teamingCloud systems
Skills:CommunicationCross-functional collaborationIndependent executionPrioritizationSecure code review
Tech Stack:AppsecMobile securityPenetration testingThreat modelingMITRE ATT&CKSDLC

Company Brief

TikTok
Short-form video platform that lets users create, share, and discover entertainment content through algorithmic recommendations. It also offers advertising and creator tools for brands, influencers, and businesses.
Industry: Digital Media
Company Size: Enterprise (1,001+ employees)
Growth: Scaleup
Headquarters: Singapore, Singapore
Founded: 2016
WebsiteLinkedIn