Cyber Security Operations Center (CSOC) Analyst - USDS

Tiktok - Washington, DC

Full-time - Entry Level

Remote - Washington, DC

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

As a Cyber Security Operations Center (CSOC) Analyst at TikTok, you will play a crucial role in safeguarding the U.S. operations and infrastructure of one of the world's leading social media platforms. This position is part of TikTok's U.S. Data Security (USDS) division, which was established to enhance data protection policies and content assurance protocols. Your primary responsibility will be to monitor and respond to security threats targeting TikTok's platform and user data, ensuring that millions of Americans can safely engage with the app. You will be stationed at the Converged Fusion Center in Washington, D.C., where you will work alongside a dedicated team focused on 24/7 monitoring of security-related information sources. In this role, you will be responsible for detecting and responding to cyber threats, conducting technical analyses of security incidents, and developing incident response plans. You will regularly survey TikTok's networks for signs of breaches, malware, or unauthorized access, and you will analyze various data sets to identify incidents and drive appropriate responses. Your work will be vital in ensuring a consistent and coordinated response to ongoing threats, allowing TikTok to operate securely and effectively. The CSOC operates on a hybrid work model, requiring you to work in the office three days a week while allowing remote work for the remaining days. This flexibility is designed to enhance collaboration and cross-functional partnerships within the organization. As a CSOC Analyst, you will also participate in incident response activities, conduct malware analysis, and support the onboarding of new products and processes into operations. This position requires a commitment to working in a fast-paced environment, often under pressure, to meet objectives and solve complex problems.

Responsibilities

• Participate in incident response activities.
• Conduct technical analysis and assessments of security-related incidents, including malware analysis, packet-level analysis, and system-level forensic analysis.
• Collect and analyze disk & memory images to identify information related to security incidents.
• Identify major threats targeting TikTok users or utilizing company infrastructure.
• Support the onboarding of new products, data, processes, or tools by identifying requirements and integrating them into operations (processes, playbooks, and training).
• Monitor multiple security-related information sources to manage incidents related to cyber, privacy, and data protection for TikTok data, infrastructure, and products.
• Develop and maintain incident response plans, playbooks, and procedures.
• Analyze disparate data sets combined with threat information to identify incidents and drive appropriate responses.

Requirements

• Experience with identifying and responding to advanced threats and threat actor TTPs.
• Excellent communication skills (verbal and written).
• Demonstrated time management, problem-solving, effort prioritization, and interpersonal skills.
• Ability to work well under pressure and within constraints to solve problems and meet objectives.
• Strong analytical/problem-solving skills and cross-functional expertise across multiple IT operational and security disciplines.
• Ability to communicate technical concepts to a broad range of technical and non-technical staff.
• High degree of integrity, trustworthiness, and ability to lead and inspire change.

Nice-to-haves

• GCIA, GCIH, GREM or applicable experience in the Information Security field.
• One or more programming/scripting languages (e.g., Perl, Java, Python, etc.).
• Experience in performing or overseeing malware analysis.
• Strong Operating System Administration skills including conceptual knowledge of OS internals and experience with core service types.
• Experience in cloud-hosted environments.
• Strong experience with UNIX/Linux and Windows environments.

Benefits

• 401(k) matching
• AD&D insurance
• Dental insurance
• Disability insurance
• Employee assistance program
• Flexible spending account
• Health insurance
• Mental and emotional health benefits through EAP and Lyra
• Paid Personal Time Off (PPTO)
• Paid sick days
• Paid Parental leave
• Paid Supplemental Disability
• Gym reimbursement
• Cellphone service reimbursement