2 days ago

Senior Endpoint Security Developer - Global Security Organization

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Build and scale enterprise endpoint security validation and detection engineering for TikTok’s Global Security Organization. You’ll design automated validation workflows, run STRIDE threat modeling, and lead offensive and defensive assessments across servers, endpoints, email, IoT, and physical infrastructure. Develop real-time security telemetry pipelines, detection platforms, and SIEM/EDR integrations, leveraging Sigma/YARA-L rules and MITRE ATT&CK-driven control validation aligned to NIST and CIS.

Location: San Jose

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Seniority: Mid level

Key Responsibilities

•Build automated, repeatable validation workflows using infrastructure-as-code to validate technical control efficacy across servers, endpoints, email systems, IoT devices, and physical infrastructure.
•Conduct STRIDE-based threat modeling and plan/execute assessments to test host-based detection/prevention controls under realistic attack scenarios (including EDR evasion and defense-bypass).
•Design and implement fault-tolerant, real-time security telemetry ingestion pipelines and columnar data lakes to process large-scale endpoint security data.
•Lead full-stack development of internal endpoint security tools including validation platforms, scanners, secrets management integrations, and IAM policy engines.
•Develop detection engineering platforms and validation mechanisms aligned to NIST, CIS, and MITRE ATT&CK, including Sigma/YARA-L rule codification and SIEM/EDR CI/CD deployment.

Key Requirements

•Hands-on experience with server (Linux, Windows), Kubernetes, and enterprise endpoint (macOS, Windows) technologies with a focus on security vs. operational/user experience tradeoffs.
•Experience simulating advanced threat actor behavior using Breach-and-Attack Simulation (BAS) frameworks and tooling in live, production-scale environments.
•Knowledge of attacker TTPs mapped to MITRE ATT&CK and translating threat intelligence into actionable detection rules.
•Proficiency in at least one programming/scripting language (Python, Go, Bash, or C/C++) with strong debugging and automation skills.
•Strong offensive security understanding of EDR evasion, defense-bypass methods, and post-exploitation tradecraft.

Experience:Enterprise securityEndpoint securityThreat intelligenceMITRE ATT&CKPurple teamSIEM

Skills:DebuggingAutomationCross-functional collaborationThreat modelingMeasurement and validation

Certifications:OSCPCRTOGPENCISSPCCSP

Tech Stack:LinuxWindowsKubernetesMacOSPythonGoBashC/C++Breach-and-Attack Simulation (BAS)MITRE ATT&CKSTRIDEApache FlinkSpark StreamingKafkaClickHouseGRPCProtobufIstioSigmaYARA-L

Company Brief

TikTok

Short-form video platform that lets users create, share, and discover entertainment content through algorithmic recommendations. It also offers advertising and creator tools for brands, influencers, and businesses.

Industry: Digital Media

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Headquarters: Singapore, Singapore

Founded: 2016

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

TikTok

2 days ago

Senior Endpoint Security Developer - Global Security Organization

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: San Jose

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Seniority: Mid level

Key Responsibilities

•Build automated, repeatable validation workflows using infrastructure-as-code to validate technical control efficacy across servers, endpoints, email systems, IoT devices, and physical infrastructure.
•Conduct STRIDE-based threat modeling and plan/execute assessments to test host-based detection/prevention controls under realistic attack scenarios (including EDR evasion and defense-bypass).
•Design and implement fault-tolerant, real-time security telemetry ingestion pipelines and columnar data lakes to process large-scale endpoint security data.
•Lead full-stack development of internal endpoint security tools including validation platforms, scanners, secrets management integrations, and IAM policy engines.
•Develop detection engineering platforms and validation mechanisms aligned to NIST, CIS, and MITRE ATT&CK, including Sigma/YARA-L rule codification and SIEM/EDR CI/CD deployment.

Key Requirements

•Hands-on experience with server (Linux, Windows), Kubernetes, and enterprise endpoint (macOS, Windows) technologies with a focus on security vs. operational/user experience tradeoffs.
•Experience simulating advanced threat actor behavior using Breach-and-Attack Simulation (BAS) frameworks and tooling in live, production-scale environments.
•Knowledge of attacker TTPs mapped to MITRE ATT&CK and translating threat intelligence into actionable detection rules.
•Proficiency in at least one programming/scripting language (Python, Go, Bash, or C/C++) with strong debugging and automation skills.
•Strong offensive security understanding of EDR evasion, defense-bypass methods, and post-exploitation tradecraft.

Experience:Enterprise securityEndpoint securityThreat intelligenceMITRE ATT&CKPurple teamSIEM

Skills:DebuggingAutomationCross-functional collaborationThreat modelingMeasurement and validation

Certifications:OSCPCRTOGPENCISSPCCSP

Tech Stack:LinuxWindowsKubernetesMacOSPythonGoBashC/C++Breach-and-Attack Simulation (BAS)MITRE ATT&CKSTRIDEApache FlinkSpark StreamingKafkaClickHouseGRPCProtobufIstioSigmaYARA-L

Company Brief

TikTok

Industry: Digital Media

Company Size: Enterprise (1,001+ employees)

Growth: Scaleup

Headquarters: Singapore, Singapore

Founded: 2016

Website LinkedIn