TikTok
Security Operations Analyst – Detection Engineering & Threat Hunting
San Jose, California · Full-time · Posted Oct 28, 2026
- Education
- Bachelor's degree in Computer Science, Cyber Security, or STEM field.
About the job
Monitors security operations, engineers and tunes detections, hunts for threats, and improves incident response and automation for a global SOC.
What you'll do
- Monitor security alerts, investigate telemetry, and conduct threat hunts; identify and close detection gaps.
- Build and maintain detection logic, SOAR playbooks, and automation across endpoint, identity, cloud, and SaaS sources.
- Support global SOC workflows and post-incident reviews, including scheduled shifts that may include holidays.
What they ask for
- Bachelor's degree in Computer Science, Cyber Security, or a STEM field.
- Experience working in or supporting a 24/7 global security operations environment.
- Proficiency with SIEM platforms and EDR tools; hands-on experience writing and tuning detection logic.
- Understanding of attacker tactics and techniques, scripting ability in Python or similar, and experience investigating identity, endpoint, cloud, and network logs.
Nice to have
- Familiarity with SOAR, detection-as-code, GitOps, or CI/CD rule deployment.
- Experience with threat hunting or purple team exercises; knowledge of red teaming, penetration testing, malware analysis, or digital forensics; relevant certifications are a plus.
Tools
SIEM, IDS/IPS, EDR, Splunk, Chronicle, Elastic, Python, PowerShell
Model-written summary · the original posting is authoritative