TikTok
Infrastructure Security Specialist - Enterprise to Edge Security, Global Security Organization
New York, New York · Full-time · Posted Oct 28, 2026
- Experience
- 5+ years preferred; no minimum years stated.
- Education
- Master’s degree in a technical field preferred, or a relevant professional security certification.
About the job
Designs, implements, and validates security architecture and controls across TikTok’s enterprise infrastructure, data centers, and hybrid and multi-cloud environments.
What you'll do
- Own security architecture and control frameworks; implement defense-in-depth controls across infrastructure and cloud services.
- Lead threat modeling and architecture reviews, and embed automated security scanning, policy-as-code, and approval gates into CI/CD pipelines.
- Improve security maturity through automated infrastructure baselines, cloud network controls, assessments, logging, and audit coverage.
What they ask for
- Experience designing and implementing security controls across hybrid and multi-cloud environments.
- Hands-on experience with cloud security tooling and concepts, including CSPM, CNAPP, CASB, and DLP.
- Experience with threat modeling, risk assessment, security validation, and automating security controls.
- Working knowledge of security frameworks and regulations such as NIST CSF, ISO 27001, GDPR, and SOX; able to work in the office 5 days a week.
Nice to have
- 5+ years of cybersecurity experience focused primarily on cloud and infrastructure security.
- Master’s degree in a technical field or relevant security certification; experience with Python or Go, modern infrastructure security, or policy-as-code is also preferred.
Tools
AWS, Azure, GCP, OCI, Python, Go, Kubernetes, Docker
Model-written summary · the original posting is authoritative