Senior Security Researcher, Global Security Organisation - TikTok, Singapore

Team Introduction
The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk. In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 3 days a week, as directed by their manager. We regularly review our hybrid work model, and the specific requirements may change at any time.

Overview
As part of the Threat Management, Incident Response & Investigation (TMIRI) team, you will join the Product Security Incident Response (ProdSecIR) team, supporting TikTok's Threat Detection and Response (TDR) team. ProdSecIR manages product security incidents, develops internal security initiatives, investigates and validates reported vulnerabilities.

Responsibilities
- Be the incident commander for product security related incidents when they occur.
- Analyze incidents to identify key issues and coordinate workstreams with global cross-functional teams for rapid resolution.
- Identify gaps in TikTok's defences and work with the relevant stakeholders to address them.
- Recommend best-practice security solutions and oversee remediation efforts with relevant teams.
- Validate product vulnerabilities and perform variant analysis to uncover related security weaknesses.
- Apply deep expertise in security vulnerabilities to strengthen product security.
- Conduct research and penetration testing to discover security gaps and potential exploits.
- Identify systemic vulnerabilities and drive remediation efforts with the appropriate teams.
- Utilize strong coding skills to develop and automate security tools, enhancing detection and protection mechanisms.