TikTok
Privacy Engineer - Red Team - PDPO
San Jose, California · Full-time · Posted Oct 28, 2026
About the job
Leads end-to-end privacy red team assessments to identify, demonstrate, and help mitigate privacy vulnerabilities across TikTok systems, products, and services.
What you'll do
- Threat-model privacy concepts into adversarial scenarios and conduct red team engagements, penetration tests, and secure code reviews.
- Research privacy threats and develop testing methods, abuse cases, and tooling to scale assessments and recurring checks.
- Partner with engineering and product teams to integrate privacy controls and provide prioritized remediation guidance.
What they ask for
- Hands-on experience as an offensive penetration tester or red teamer.
- Demonstrated depth in application security, mobile security pentesting, red team exercises, APT simulations, and cloud systems.
- Experience manually reviewing production code and leading complex technical assessments end-to-end.
- Working knowledge of privacy concepts and major privacy regulations, including GDPR and CCPA, and their technical controls.
Nice to have
- Experience with MITRE ATT&CK and proficiency in a scripting language.
- Contributions to the security or privacy community, such as research, talks, blog posts, bug bounty findings, CVEs, or OSS tooling.
Tools
GDPR, CCPA, MITRE ATT&CK
Model-written summary · the original posting is authoritative