Security Engineer - Offensive Security, Native

Security Team at TikTokThe team's mission is to build secure infrastructure, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructure. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference. Responsibilities:

• Conduct vulnerability research of the native components of the most critical systems and products (mobile and desktop apps, cloud).
  
• Collaborate closely with other security and product teams to design defense-in-depth controls that limit attackers' ability and improve our security posture.
  
• Drive secure-by-default and automation initiatives to boost native components' security.
  
• Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to our infrastructure, technologies, and products.
  
• Bring insight into all aspects of modern security issues to our products and rapidly developing prototypes for mitigations.
  
• Support Red Team with vulnerability research and exploit development.
  
  Minimum Qualifications
  
• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or other relevant majors.
  
• 3+ years of experience in ethical hacking, vulnerability research, product security, exploit development, or being a member of a red team.
  
• First-hand experience in C/C++ reviews, fuzzing, reverse engineering, and binary exploitation. - Advanced knowledge and understanding in at least one of the following disciplines: end-user device security, cloud computing, operating system internals and hardening, mobile and desktop app security, network security, applied cryptography.
  
• Strong problem-solving skills and excellent debugging / troubleshooting skills.