TikTok
Security Operations Analyst - Detection Engineering & Threat Hunting, Global SOC
San Jose, California · Full-time · Posted Oct 28, 2026
- Experience
- 4+ years in security operations, incident response, detection engineering, or threat hunting roles.
- Education
- Bachelor's degree in Computer Science, Cyber Security, or STEM field (preferred).
About the job
Monitors and improves security detection and incident response through threat hunting, detection engineering, and automation for TikTok’s global SOC.
What you'll do
- Build and tune detections, investigate alerts, and conduct threat hunts across endpoint, identity, cloud, and SaaS telemetry.
- Develop SOAR playbooks and scripts, operationalize threat intelligence, and address detection gaps.
- Support scheduled on-call shifts and contribute to incident reviews and response workflow improvements.
What they ask for
- Strong proficiency with SIEM platforms and EDR tools.
- Hands-on experience writing and tuning detection logic; understanding of attacker tactics and techniques.
- Scripting ability in Python or similar languages and experience investigating identity, endpoint, cloud, and network logs.
- Availability for scheduled shifts and on-call support, which may include holidays.
Nice to have
- Familiarity with SOAR, detection-as-code pipelines, GitOps, CI/CD rule deployment, or threat hunt and purple team exercises.
- Knowledge of red teaming, penetration testing, malware analysis, or digital forensics; certifications such as GCIH, GCIA, GCTI, OSCP, or equivalent.
Tools
SIEM, IDS/IPS, EDR, Splunk, Chronicle, Elastic, Python, PowerShell
Model-written summary · the original posting is authoritative