Threat Intelligence Analyst, Global Security Organization

TikTok

  • San Jose, CA
  • Permanent
  • Full-time
  • 27 days ago
The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us - whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop - GSO protects their data and privacy, so they can have a secure and trustworthy experience.The Threat Intelligence Analyst will be responsible for developing intelligence products through collection, evaluation, analysis and reporting of cyber threat information and the development of intelligence services for the company worldwide. You will be responsible for continuously assessing and reviewing intelligence requirements, gathering and centralizing relevant sources of intelligence, and developing and disseminating non technical threat intelligence. You will be presenting reports for awareness and response action. To be successful, the Threat Intelligence engineer will drive teams to build products customized for stakeholder needs, including cyber threat intelligence, cybercrime intelligence, vulnerability intelligence, counterintelligence, and insider risk.Responsibilities
- Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to our infrastructure and products.
- Research new methods and technologies to detect cyber threats, identify signals, and design data-driven approaches that use these signals to identify security threats and security breaches.
- Intelligence data development and scripting (Python/Golang)
- Collaborate with cross-functional software engineering teams in developing products and services
- Create and maintain use cases for intelligence monitoring, develop and deliver high-quality written products and oral intelligence briefings
- Identify and assess emerging risks, including analysis of deep and dark web data
- Apply cutting-edge AI technologies/Machine Learning (ML) to develop innovative AI solutions for security.Qualifications:Minimum Qualifications
- Proficient experience in threat intelligence analysis, intelligence services and content development
- Proficient experience in computer security incident handling, Advanced Persistent Threat (APT), insider threat, and physical asset security
- Knowledge and expertise in developing threat intelligence reporting and management of threat intelligence platforms
- Knowledge of networking fundamentals (TCP/IP, Network Layers, etc.), malware operation and indicators, current threat landscape (threat actors, APT, cyber-crime, etc.), and security-related technologies and their functions (IDS, IPS, FW, WAF, SIEM, EDR, DLP, Proxy, next gen anti-malware etc.)Preferred Qualifications
- Bachelors' Degree or industry equivalent work experience in international security architecture and engineering in a converged security program GCTI certification or minimum 5 years applicable experience
- Automatic data gathering development and scripting skills are preferred.
- In depth knowledge in the use of databases for reporting (SQL language) GCIH, GCIA, CEH, or CISSP

TikTok