TikTok
Senior Security Investigator, Insider Risk - Global Security Organization
San Jose, California · Senior · Full-time · Posted Oct 28, 2026
- Experience
- 5+ years in Insider Risk, Insider Threat, Security Engineering, Digital Forensics, Incident Response, or related disciplines (preferred).
- Education
- Bachelor’s degree or above in Cybersecurity, Computer Science, Software Engineering (preferred).
About the job
Leads global technical investigations into insider risks involving TikTok personnel or operations, from initial detection through remediation and reporting.
What you'll do
- Investigate data misuse, unauthorized access, policy violations, conflicts of interest, and other insider-risk concerns; analyze telemetry across regional infrastructure.
- Interview employees and stakeholders, produce region-specific investigation reports, and coordinate outcomes with Legal, HR, Engineering, PR, and Policy.
- Identify detection gaps, contribute to threat modeling and alerting, and handle sensitive information in accordance with regional privacy laws.
What they ask for
- Technical proficiency analyzing logs and investigating identity, cloud, endpoint, network, email, and collaboration-platform activity.
- Understanding of security principles and developer workflows and tools.
- Experience independently leading complex security investigations through remediation, including endpoint, cloud, and identity-based investigations.
- Ability to handle confidential information discreetly, mentor analysts, serve as a technical escalation point, and produce reports for counsel, executives, and auditors.
Nice to have
- Experience developing detections, investigative playbooks, workflows, or automation; conducting investigative interviews; or working at a global tech company or social platform.
- Familiarity with GDPR or equivalent privacy frameworks, insider-threat frameworks, risk modeling, or investigations involving public scrutiny or regulatory engagement.
Tools
Okta, AD, GCP, AWS, Azure, Ali Cloud, EDR, Git
Model-written summary · the original posting is authoritative