2 days ago

Senior Digital Forensics Investigator - Global Security Organization

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 12 hours agoStatus: Live

Job Summary

Lead end-to-end technical threat investigations for TikTok’s Global Digital Forensics team, correlating multi-source logs to produce audit-ready evidence and fact-based narratives. Conduct insider and external threat analysis, acquire and analyze endpoint and mobile artifacts, and investigate cloud telemetry across Azure, AWS, and Google Cloud. Build timelines and causality chains, propose detection rules and playbooks, and communicate executive findings to Legal, Compliance, HR, and senior leadership.

Location: Singapore

Workplace: Onsite

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Lead end-to-end investigations of suspected threat activity, including scoping, planning, triage, evidence collection/preservation, analysis, documentation, and remediation recommendations.
•Investigate insider threats using user behavior analysis and external threats using root cause analysis to determine intent, vector, scope, and affected assets.
•Acquire and preserve network, host, mobile, and cloud evidence using forensically sound techniques to support legal or disciplinary processes.
•Perform host-based forensic analysis across Windows, macOS, Linux, and iOS/Android devices; acquire and analyze cloud artifacts from Azure, AWS, and Google Cloud.
•Correlate telemetry and data across sources to build timelines and causality chains, drive threat hunting, and propose detection rules, monitoring use cases, and investigation playbooks.

Key Requirements

•Minimum 7 years of experience in digital forensics, threat investigations, or equivalent security investigation roles using forensically sound methods.
•Strong hands-on investigation experience across at least 2 domains including endpoint systems, network telemetry, cloud environments, identity systems, and business-critical internal platforms.
•Demonstrated experience analyzing EDR or HIDS telemetry, including process execution, persistence, file activity, authentication events, and network connections.
•Strong knowledge of query languages (SPL, KQL, or SQL) to query, pivot, correlate, and analyze large datasets.
•Proven experience using Python, jq, SQL, or similar technologies to automate data collection, enrichment, and correlation.

Experience:7+ yearsDigital forensicsThreat investigationsEndpoint securityCloud securitySecurity investigations

Skills:Executive communicationStakeholder communicationDocumentation

Certifications:GIMEGCFEGCFAEnCE

Tech Stack:PythonJqSQLSPLKQLEDRHIDSDLPFirewallProxyVPNDNSFlow logsAzureAWSGoogle CloudWindowsMacOSLinuxIOS

Company Brief

TikTok

Short-form video platform that lets users create, share, and discover entertainment content through algorithmic recommendations. It also offers advertising and creator tools for brands, influencers, and businesses.

Industry: Digital Media

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Headquarters: Singapore, Singapore

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

TikTok

2 days ago

Senior Digital Forensics Investigator - Global Security Organization

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 12 hours agoStatus: Live

Job Summary

Location: Singapore

Workplace: Onsite

Employment Type: Full time

Job Function: Solutions Engineering & Sales Engineering

Seniority: Mid level

Key Responsibilities

•Lead end-to-end investigations of suspected threat activity, including scoping, planning, triage, evidence collection/preservation, analysis, documentation, and remediation recommendations.
•Investigate insider threats using user behavior analysis and external threats using root cause analysis to determine intent, vector, scope, and affected assets.
•Acquire and preserve network, host, mobile, and cloud evidence using forensically sound techniques to support legal or disciplinary processes.
•Perform host-based forensic analysis across Windows, macOS, Linux, and iOS/Android devices; acquire and analyze cloud artifacts from Azure, AWS, and Google Cloud.
•Correlate telemetry and data across sources to build timelines and causality chains, drive threat hunting, and propose detection rules, monitoring use cases, and investigation playbooks.

Key Requirements

•Minimum 7 years of experience in digital forensics, threat investigations, or equivalent security investigation roles using forensically sound methods.
•Strong hands-on investigation experience across at least 2 domains including endpoint systems, network telemetry, cloud environments, identity systems, and business-critical internal platforms.
•Demonstrated experience analyzing EDR or HIDS telemetry, including process execution, persistence, file activity, authentication events, and network connections.
•Strong knowledge of query languages (SPL, KQL, or SQL) to query, pivot, correlate, and analyze large datasets.
•Proven experience using Python, jq, SQL, or similar technologies to automate data collection, enrichment, and correlation.

Experience:7+ yearsDigital forensicsThreat investigationsEndpoint securityCloud securitySecurity investigations

Skills:Executive communicationStakeholder communicationDocumentation

Certifications:GIMEGCFEGCFAEnCE

Tech Stack:PythonJqSQLSPLKQLEDRHIDSDLPFirewallProxyVPNDNSFlow logsAzureAWSGoogle CloudWindowsMacOSLinuxIOS

Company Brief

TikTok

Industry: Digital Media

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Headquarters: Singapore, Singapore

Founded: 2016

Website LinkedIn