Security Engineer - Offensive Security, Native

TikTok
London
6 months ago
Applications closed

Related Jobs

View all jobs

Security Engineer

Security Engineer

Network Security Engineer

Network Security Engineer

AWS Security Engineer

AI Security Engineer- security engineering/ cloud security

Security Engineer - Offensive Security, Native

2 days ago Be among the first 25 applicants

Responsibilities
Security Team at TikTok
The team's mission is to build secure infrastructure, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructure. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities:
- Conduct vulnerability research of the native components of the most critical systems and products (mobile and desktop apps, cloud).
- Collaborate closely with other security and product teams to design defense-in-depth controls that limit attackers' ability and improve our security posture.
- Drive secure-by-default and automation initiatives to boost native components' security.
- Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to our infrastructure, technologies, and products.
- Bring insight into all aspects of modern security issues to our products and rapidly developing prototypes for mitigations.
- Support Red Team with vulnerability research and exploit development.

Qualifications
Minimum Qualifications
- Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or other relevant majors.
- 3+ years of experience in ethical hacking, vulnerability research, product security, exploit development, or being a member of a red team.
- First-hand experience in C/C++ reviews, fuzzing, reverse engineering, and binary exploitation.
- Advanced knowledge and understanding in at least one of the following disciplines: end-user device security, cloud computing, operating system internals and hardening, mobile and desktop app security, network security, applied cryptography.
- Strong problem-solving skills and excellent debugging / troubleshooting skills.

About TikTok
TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and we also have offices in New York City, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.


Why Join Us
Inspiring creativity is at the core of TikTok's mission. Our innovative product is built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and bring joy - a mission we work towards every day.
We strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. Every challenge is an opportunity to learn and innovate as one team. We're resilient and embrace challenges as they come. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion
TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Seniority level

  • Seniority levelMid-Senior level

Employment type

  • Employment typeFull-time

Job function

  • Job functionInformation Technology
  • IndustriesTechnology, Information and Internet

Referrals increase your chances of interviewing at TikTok by 2x

Get notified about new Security Engineer jobs inLondon, England, United Kingdom.

London, England, United Kingdom 1 week ago

London, England, United Kingdom 1 month ago

Greater London, England, United Kingdom 4 months ago

London, England, United Kingdom 2 weeks ago

Loughton, England, United Kingdom 6 months ago

Security Analyst, Security Operations and Incident Response

London, England, United Kingdom 4 days ago

London, England, United Kingdom 2 months ago

London, England, United Kingdom 1 month ago

London, England, United Kingdom 1 day ago

London, England, United Kingdom 2 months ago

London, England, United Kingdom 3 weeks ago

London, England, United Kingdom 2 months ago

London, England, United Kingdom 1 month ago

Gerrards Cross, England, United Kingdom 3 days ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.


#J-18808-Ljbffr

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Jobs for Career Switchers in Their 30s, 40s & 50s (UK Reality Check)

If you’re thinking about switching into cyber security in your 30s, 40s or 50s, you’re in good company. Across the UK, organisations of all sizes are hiring people from diverse backgrounds to protect systems, data & customers. But with hype around “hackers” & quick-win courses, it’s hard to separate reality from fiction. This guide gives you a UK reality check: which roles genuinely exist, what employers actually want, how training really works, what to expect on salary & progression & whether age matters. Whether you come from finance, project management, operations, law, HR or customer service, there is a credible route into cyber security if you approach it strategically.

How to Write a Cyber Security Job Ad That Attracts the Right People

Cyber security is now a board-level priority for organisations across the UK. From financial services and healthcare to critical infrastructure, SaaS platforms and the public sector, demand for skilled cyber security professionals continues to grow. Yet despite this demand, many employers struggle to attract the right candidates. Cyber security job adverts often generate large volumes of applications, but few are a genuine match. Meanwhile, experienced security engineers, analysts and architects quietly ignore adverts that feel vague, unrealistic or disconnected from real security work. In most cases, the problem is not a lack of talent — it is the quality of the job advert. Cyber security professionals are trained to assess risk, spot weaknesses and question assumptions. A poorly written job ad signals organisational immaturity and weak security culture. A well-written one signals seriousness, competence and trust. This guide explains how to write a cyber security job ad that attracts the right people, improves applicant quality and positions your organisation as a credible security employer.

Maths for Cyber Security Jobs: The Only Topics You Actually Need (& How to Learn Them)

If you are applying for cyber security jobs in the UK it can feel like “real security people” must be brilliant at maths. The reality is simpler: most roles do not need degree-level pure maths. What they do need is confidence with a small set of practical topics that show up repeatedly in day-to-day work across SOC, incident response, cloud security, AppSec, threat detection, IAM & security engineering. This guide strips the maths down to what actually helps you get hired. It includes a 6-week learning plan plus portfolio projects you can publish to prove the skills. You will focus on: Number systems & bitwise thinking (binary, hex, bytes, XOR) Modular arithmetic basics (enough to understand how modern crypto “works”) Probability & statistics for detection, triage & risk Discrete maths for logic, sets, graphs & complexity Security maths habits: estimation, false positive control & evidence-led reporting You will not waste time on heavy theory that rarely appears in junior or mid-level cyber security roles.