About the Team PDPO(Privacy and Data Protection Office) is the organization to lead, supervise, and empower all TikTok's privacy work in an accountable and industry leading way. This team is the expert in the landscape of privacy risks and passionate about consulting across the company on implementing the proper safeguards and technical mitigations to ensure that our users’ privacy is honored across the TikTok's products and platforms. What you’ll do: - Conduct technical assessments focused on finding privacy issues in internal and external facing systems, products, and services. - Partner with Engineering teams to optimize SDLC testing. - Support the development of practices, processes, mechanisms, and the documentation for these activities, both internally and with working groups. - Build tooling to automate portions of assessments Knowledge, Skills & Abilities: - Strong Computer Science, Security engineering and Privacy engineering fundamentals - Able to collaborate, prioritize duties, and work well on your own - Excellent interpersonal skills with a high attention to detail
Minimum Qualifications: - 3+ years work experience in web security or data security - Experience in Penetration Testing or Red Team exercises - Ability to understand and apply privacy foundational concepts Preferred Qualifications: - Experience making contributions to the security or privacy community, such as public research, blogging, presentations, bug bounties, CVEs, etc. - 2+ years work experience with scripting language including code maintenance and review - Experience implementing or assessing the implementation of GDPR, CCPA, or equivalent privacy regulation - Experience with tools used to perform Dynamic Application Security Testing (DAST) or Static Application Security Testing (SAST) - Experience with common testing frameworks, such as the MITRE ATT&CK framework
Read Full Description