Responsibilities
Team Introduction: TikTok is an international short video platform covering 150 countries and regions. We hope to discover real and interesting moments through TikTok and make life better. TikTok has offices around the world, with global headquarters in Los Angeles and Singapore, and offices in New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul and Tokyo. The TikTok R&D team aims to realize the R&D work of TikTok business and build and maintain industry-leading products. Join us, you will be exposed to core business scenarios including user growth, social networking, live broadcasting, e-commerce C-end, content creation, content consumption, etc., supporting the rapid development of products in the global track you will also be exposed to technical challenges in service architecture, basic technology and other directions, ensuring that the business continues to serve users with high quality, high efficiency and security at the same time, you can also provide comprehensive technical solutions for different business scenarios, optimize various product indicators and user experience. Here, there are big cows leading the team to explore the frontier and break through the imagination space. Here, every line of your code will serve hundreds of millions of users. Here, the team is professional and pure, and the cooperative atmosphere is equal and relaxed. Currently, multiple job opportunities are open in Beijing, Shanghai, Hangzhou, Guangzhou and Shenzhen. 1. Responsible for the privacy and security capability assessment of TikTok applications and internal data protection systems 2. Responsible for the construction of privacy and security threat models, continuously promote privacy data compliance and privacy and security issues, and assist the business in improving privacy and security capabilities 3. Responsible for the research of cutting-edge privacy and security issues, and improve the team's privacy and security technical capabilities and awareness of privacy and security issues.
Qualifications
1. More than 5 years of security-related work experience, proficient in one or more of Golang, Python, Java, C/C++ languages 2. Familiar with Web security-related privacy security vulnerability mining and reverse engineering, proficient in using reverse engineering and debugging tools in the corresponding fields 3. Familiar with common Web application frameworks, cloud service architectures, and database storage system principles, and have experience in penetrating actual production environments. Experience in defense system construction 4. Proficient in the vulnerability principles of related directions, able to independently complete the entire process from system analysis, vulnerability exploitation to privacy data impact assessment, and have a complete and systematic understanding of the ideas of vulnerability exploitation and system penetration 5. Have a certain understanding of data privacy business, and can effectively apply security attack and defense methods to data privacy business 6. Good logical thinking, teamwork, communication skills, execution, and certain stress resistance. Bonus points: 1. Those who have experience in HW or CTF competitions and have achieved good results are preferred 2. Those who have published relevant papers or conference speeches in the field of privacy security are preferred 3. Those who have discovered and submitted actual SRC high-risk and serious privacy security vulnerabilities are preferred.
