TikTok
Senior Security Engineer (Multiple Positions)
San Jose, California · Senior · Full-time · Posted Oct 28, 2026
- Experience
- 2 years of related work experience with a master’s degree, or 5 years of progressive related post-bachelor’s work experience with a bachelor’s degree; at least 2 years in each of the six specified experience areas.
- Education
- Master’s degree or foreign equivalent in Computer Science, Engineering (any), Information Technology, Information Systems, Information Security, Cybersecurity, or a related field; OR a bachelor’s degree or foreign equivalent in one of those fields or a related field.
About the job
Build and assess secure-by-design systems, review applications and infrastructure, and support security assessments, threat analysis, incident response, and developer security practices.
What you'll do
- Review system designs, architectures, services, and applications using methods such as code reviews, threat modeling, testing, and research.
- Assess new application features and work with stakeholders on threats, vulnerabilities, forensic analysis, and incident response.
- Improve the SDLC through developer feedback and mentor junior team members.
What they ask for
- Master’s degree or foreign equivalent in a listed or related field plus 2 years of related work experience; or bachelor’s degree or foreign equivalent in a listed or related field plus 5 years of progressive related post-bachelor’s experience.
- At least 2 years in each of the six specified experience areas: security domains; design review/threat modeling/security or privacy engineering; business-logic-based security configuration; coding in a listed language; compliance readiness; and software debugging/troubleshooting.
- Coding experience must include at least one of JavaScript (Node JS), Go, Python, Java, C++, or Rust.
- Compliance experience must include information security controls, frameworks, or standards, including ISO 27001, NIST CSF, PCI-DSS, or HIPAA.
Pay
$242278 - $387600 per year (base salary)
Tools
JavaScript (Node JS), Go, Python, Java, C++, Rust, ISO 27001, NIST CSF
Model-written summary · the original posting is authoritative