Application/Product Security Engineer Graduate (Security BP) - 2027 Start

About the Team and Opportunity

This role is within a team tasked with creating infrastructures, platforms, and technologies that support cross-functional groups to safeguard users, products, and infrastructure. The team addresses unique and complex security challenges, building scalable, secure-by-design systems. Joining as a graduate allows participation in pioneering security initiatives that differ from typical technical problems at large tech firms.

Key Responsibilities

• Design and implement applications adhering to the highest standards of security and privacy to uphold and enhance user trust.
• Conduct security assessments including design and architecture reviews, system and service analysis, black-box testing, code reviews, automation, threat modeling, and research.
• Identify security vulnerabilities under emerging threat scenarios and support incident response, forensics, and remediation efforts in collaboration with other teams, driving issues to resolution.

Minimum Qualifications

• Candidates who have recently completed or are completing a Bachelor's in Computer Science, Computer Engineering, Electrical Engineering, or related fields.
• Experience or demonstrated keen interest in security engineering through internships, academic projects, research, capture-the-flag (CTF) contests, bug bounty programs, open-source contributions, or personal projects.
• Strong foundational knowledge in application security, software engineering, or related domains including web, mobile, network, operating systems, applied cryptography, or cloud security; with demonstrated interest or expertise in at least one area.
• Proficiency in coding and comprehension in one or more languages such as JavaScript (Node.js), Go, Python, Java, C++, or Rust.
• Exceptional problem-solving abilities alongside strong debugging and troubleshooting skills.

Preferred Qualifications

• Hands-on experience developing AI-driven applications or using AI/large language models for vulnerability detection, security analysis, or automating security reviews.
• Participation in CTF competitions, live hacking events, or other security challenges.
• Experience in identifying or responsibly disclosing security vulnerabilities, including those with CVEs.
• Track record in bug bounty programs with reputable platforms like HackerOne or BugCrowd.

Additional Information

Applicants must be ready to begin onboarding by the end of the year and clearly specify their availability and graduation date. Applicants may apply for up to two positions within the company and affiliated entities globally; applications are reviewed as received, encouraging early submission.

About TikTok

TikTok is a global leader in short-form mobile video, committed to inspiring creativity and bringing joy. With global offices spanning from Los Angeles to Singapore and beyond, TikTok fosters a diverse and inclusive environment that values different perspectives and backgrounds.

Diversity & Inclusion

The company is dedicated to fostering an inclusive workspace that appreciates the unique experiences and voices of its employees worldwide, aligning with TikTok’s mission to inspire creativity and joy.

Acknowledgement of Country

TikTok honours the Traditional Custodians of Australia’s lands and waters and respects the ongoing contributions of Aboriginal and Torres Strait Islander peoples.