Senior Cloud Security Operations Specialist

1 week ago


San Jose, United States Tik Tok Full time
Responsibilities

TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. TikTok has global offices including Los Angeles, New York, London, Paris, Berlin, Dubai, Singapore, Jakarta, Seoul and Tokyo.

Why Join Us
Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.
Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.
To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.
At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.
Join us.

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk. In order to enhance collaboration and cross-functional partnerships, our organization follows a hybrid work schedule that requires employees to work in the office for 2 to 3 days a week, as directed by their manager. We regularly review our hybrid work model, and the specific requirements may change at any time.

This role is a part of Cloud Security within the Security Tools Operations team. As a Cloud Security Operations Specialist, you will be part of a team that manages the design, engineering, and deployment of tools and technologies to monitor our global cloud infrastructure footprint. These tools help validate asset inventory, ensure proper access, and detect/prevent cloud-based misconfigurations and vulnerabilities. You will also assist our network and endpoint security teams in consistently applying our security tooling like CWPP, WAF, Anti-DDOS, and IDS technologies to ensure our public cloud environments remain secure. Lastly, you will serve as a cloud SME, performing architecture design reviews, training sessions, and ad-hoc support during investigations and projects while working with our vulnerability management, incident response, GRC, and other XFN teams within GSO and the broader TikTok organization.

The candidate must be skilled in assessing current state of various cloud environments against industry best practices, identifying functional and technical requirements for cloud security tooling, implementing cloud-native and third party security solutions in a multi-cloud environment, and conducting analysis on cloud related threats, incidents and other general security-related issues. The candidate must also have the ability to communicate well, participate in coordinating response and defensive actions over a variety of security disciplines, and disseminate security information as appropriate in support of TikTok's critical business, go to market, and operational infrastructure needs.

Tasks and Responsibilities:
- Support the development and execution of enterprise-wide Cloud security program
- Define and manage security controls for a multi-cloud architecture
- Configure, maintain, deploy, and write rules in Cloud security tools (CSPM, CWPP, CNAPP)
- Design and implement 3rd party and cloud-native tooling to meet defined requirements
- Develop standard operating procedures and trainings for each technology
- Architect and continuously improve security technology stack, process and procedures, support model and cross-function interactions utilizing automation where possible
- Review and assess utilization of Cloud security tooling
- Promote and drive adoption of Cloud security tooling across the enterprise
- Partner across the Security Operations team to respond to cybersecurity incidents
- Develop and report Cloud security coverage metrics and remediation plans
- Define procedures to validate the effectiveness of the design, deployment, and management of security controls that aim to maintain confidentiality, integrity, and availability of Cloud networks and technology platforms

Qualifications

Minimum Qualifications:
- Strong understanding of:
- Cloud security industry standards and best practices (CSA CCM, CIS benchmarks, etc.)
- TCP, IP, HTTP and basic application architecture
- Operations and maintenance of Cloud security technology stack (CSPM, CWPP, CIEM, Cloud native features like GuardDuty, AWS Config, Amazon Inspector, etc.)
- Proficient use of Linux, MacOS, and Windows Operating System tools (such as curl, wget, nslookup, etc)
- Working proficiency with at least one scripting language (Python, Javascript, Java, etc.)
- Hands-on experience with proxies, load balancers, virtual machines, containers, and/or serverless technologies
- Demonstrated ability to quickly assimilate new information and remain current on new developments in cybersecurity capabilities and industry knowledge

Preferred Qualifications:
- Minimum of 5 years of experience operating in at least one cloud provider, preferably GCP, AWS, or OCI
- CISSP, SSCP, cloud provider certifications from AWS, GCP, OCI, or applicable experience in the Information Security field
- Experience in a multi-cloud or hybrid cloud environment
- Hands-on experience with SecDevOps technologies including Docker, Kubernetes, Jenkins, Terraform, and/or Cloudformation
- Experience with other security technology tools (SIEM, SOAR, EDR, WAF, Anti-DDOS, IDS/IPS, DLP, ZTA, PAM, Secrets Management)

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

TikTok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at gprd.accommodations@tiktok.com

#LI-Hybrid

  • San Jose, California, United States Tik Tok Full time

    Job DescriptionAt TikTok, we're looking for a skilled Cloud Security Operations Specialist to join our team. As a key member of our Global Security Organization, you'll play a critical role in ensuring the security and integrity of our cloud infrastructure.Responsibilities:Support the development and execution of our enterprise-wide Cloud security...


  • San Francisco, California, United States Aqua Security Full time

    About the RoleAqua Security is seeking a skilled Cloud Security Specialist to join our team. As a Cloud Security Specialist, you will be responsible for providing subject-matter expertise on the security of running software containers (Docker and other formats), which are rapidly being adopted in enterprise deployments.You will drive technical relationships...


  • San Jose, California, United States InterSources Full time

    Job Title: Cloud Security SpecialistJob Summary:InterSources is seeking a skilled Cloud Security Specialist to join our team. The ideal candidate will have expertise in AWS Security architecture, information management, and security testing.Key Responsibilities: Design and implement secure cloud infrastructure Develop and maintain AWS IAM policies Conduct...


  • San Jose, California, United States CyberTec Full time

    Job Title: Senior Product Manager - Cloud SecurityJob Summary: We are seeking a Senior Product Manager to lead our Cloud Security product development.Key Responsibilities:* Develop and execute product strategies to drive business growth* Collaborate with cross-functional teams to design and deliver cloud security solutions* Work with customers to understand...


  • San Jose, California, United States Zscaler Full time

    About ZscalerServing thousands of enterprise customers worldwide, including 40% of Fortune 500 companies, Zscaler is a leading cloud security company founded in 2007. Our mission is to make the cloud a safe place to do business and provide a seamless experience for enterprise users. As the operator of the world's largest security cloud, Zscaler accelerates...


  • San Francisco, California, United States Cloud Security Services Full time

    Job DescriptionCloud Security Services is seeking experienced professionals to work on projects related to Identity Governance and Administration (IGA), Access Management (AM), and Cloud integrations. The selected candidates will collaborate with clients to understand their identity management requirements and translate them into ForgeRock...


  • San Jose, United States TEKsystems Full time

    Job DescriptionJob DescriptionTop Skills' Details1. Firewalls (next gen and web app)○ Know how to create basic security policy○ Be able to create policies, net reals, and know the UTM features○ Palo Alto is in their environment2. F5 Reverse proxy/load balancing (web filtering and intrusion detection)○ Certificate management (Use Wireshark… can...


  • San Jose, California, United States InterSources Full time

    Job Title:Security Service Enablement/Systems EngineerLocation:Austin, TXDuration:Long term contractKey Responsibilities:Understand and follow Apple service security review processPerform in-depth research on IaaS and PaaS services using cloud provider documentationReview public cloud services to identify potential methods of misuse which would violate Apple...


  • San Jose, California, United States HPE Full time

    Job Title: Senior Cloud DeveloperJob Summary:We are seeking a highly skilled Senior Cloud Developer to join our team at HPE. As a Senior Cloud Developer, you will be responsible for designing, developing, and deploying cloud-based applications and services. You will work closely with our cross-functional teams to ensure that our cloud solutions meet the...


  • San Francisco, California, United States odaseva Full time

    Senior SecOps EngineerWe are seeking a highly skilled Senior SecOps Engineer to accelerate our growth and enhance the security of our platform, infrastructure, and tooling.In this role, you will be responsible for designing, deploying, operating, and continuously improving our security solutions to ensure the security of Odaseva's cloud infrastructure and...


  • San Jose, California, United States CyberTec Full time

    Sr. Product Manager - Security and ComplianceWe are seeking a highly experienced Sr. Product Manager to lead our Cloud Security and Compliance project. The ideal candidate will have a strong background in IT/Engineering and a deep understanding of Cloud Computing, Security Operations, and Compliance.Key Responsibilities:Develop and execute a comprehensive...


  • San Jose, California, United States Cisco Full time

    Key Responsibilities:We are seeking a highly motivated Technical Marketing Engineer to lead our Cloud & Network Security Product organization at Cisco.Key Requirements:Proven experience in technical marketing and engineeringStrong leadership skillsAbility to communicate complex technical conceptsWhat We Offer:Cisco offers a dynamic and challenging work...


  • San Francisco, California, United States odaseva Full time

    Senior SecOps EngineerWe are seeking a highly skilled Senior SecOps Engineer to accelerate our growth and enhance the security of our platform, infrastructure, and tooling.In this role, you will be responsible for designing, deploying, operating, and continuously improving our security solutions to ensure the security of Odaseva's platform, infrastructure,...


  • San Mateo, California, United States Snowflake Computing Full time

    Senior Cloud Security EngineerAt Snowflake Computing, we're building a secure and scalable cloud data platform. As a Senior Cloud Security Engineer, you'll play a critical role in designing and implementing secure solutions for our customers.Key Responsibilities:Lead the design and implementation of secure cloud-based solutionsCollaborate with...


  • San Jose, United States Walsh Employment Full time

    Voted by employees as a Top Place to Work, our client’s patented software platform provides early detection, diagnosis and recovery of cyber and ransomware attacks allowing businesses to accelerate response, minimize disruption, prevent data loss, and reduce risk. The business is leading the way in developing cutting edge, high-performance AI-powered data...


  • San Jose, California, United States Red Oak Technologies Full time

    At Red Oak Technologies, we're seeking a seasoned professional to lead our data security efforts. As a Senior Cybersecurity Specialist, you'll be responsible for designing and implementing robust security capabilities to safeguard our enterprise and data landscape.Your ImpactDevelop and execute comprehensive security strategies to prevent unauthorized access...


  • San Jose, California, United States Extreme Networks Full time

    Job Title: Cloud Operations Engineer - Infrastructure SpecialistLocation: San Jose, CA (Hybrid)Full TimeResponsibilitiesManage and maintain Extreme's cloud infrastructure in AWS, GCP & Azure.Provide technical leadership in cloud infrastructure design and implementation.Ensure secure and reliable communication across different regions and cloud service...


  • San Francisco, California, United States Robust Intelligence Full time

    At Robust Intelligence, we're committed to eliminating AI risk. As AI becomes increasingly integrated into automated decision-making processes, we face significant challenges. Our flagship product is designed to work seamlessly with existing AI systems, identifying and mitigating risks associated with unintentional and intentional failure modes. With the...


  • San Jose, California, United States HireIO Inc Full time

    Job Title: Senior Cloud Infrastructure EngineerWe are seeking a highly skilled Senior Cloud Infrastructure Engineer to join our team at HireIO Inc. The ideal candidate will have a strong background in cloud computing, with expertise in designing and implementing scalable and secure cloud infrastructure solutions.The successful candidate will be responsible...


  • San Mateo, California, United States Snowflake Computing Full time

    We are seeking a highly skilled Senior Cloud Security Engineer to join our team at Snowflake Computing. In this role, you will lead impactful initiatives from idea formulation to design and implementation, innovating, designing, and building highly available, reliable, and secure distributed services and solutions within the global Snowflake platform.As a...