Senior Cyber Security Operations Center (CSOC) Analyst - USDS

Tiktok - Washington, DC

Full-time - Senior

Washington, DC

Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services

About the position

As a Senior CSOC Analyst at TikTok, you will be part of the U.S. Cyber Security Operations Center (CSOC) team, responsible for detecting and responding to cyber threats targeting TikTok's U.S. operations and infrastructure. This role involves 24x7 monitoring of security-related information, incident response activities, and the development of incident response plans and procedures to ensure the safety and security of TikTok's platform and user data.

Responsibilities

• Participate in incident response activities.
• Conduct technical analysis and assessments of security-related incidents, including malware analysis, packet-level analysis, and system-level forensic analysis.
• Collect and analyze disk & memory images to identify information related to security incidents.
• Identify major threats that target TikTok users or utilize company infrastructure.
• Support the onboarding of new products, data, processes, or tools by identifying requirements and integrating them into operations (processes, playbooks, and training).
• Work in a 24x7 operation requiring shift and/or on-call work.

Requirements

• Bachelor's degree in Cybersecurity or equivalent discipline from an accredited college or university, or measurable knowledge/experience from proven industry, military, defense, or government operations.
• 5+ years of experience handling security-related incidents.
• Experience with identifying and responding to advanced threats and threat actor TTPs.
• Excellent communication skills (verbal and written) and ability to influence without authority.
• Demonstrated teamwork and collaboration skills, particularly in leading or contributing to global and multi-functional teams.
• Demonstrated time management, problem-solving, effort prioritization, and interpersonal skills.
• High degree of integrity, trustworthiness, and ability to lead and inspire change.

Nice-to-haves

• Excellent fundamental knowledge of industry-standard frameworks (e.g., MITRE ATT&CK).
• GCIA, GCIH, GREM or applicable experience in the Information Security field.
• Proficiency in one or more programming/scripting languages (e.g., Perl, Java, Python).
• Experience writing and executing SQL queries.
• Experience in performing or overseeing static/dynamic malware analysis.
• Experience in performing digital forensics for incident response.
• Strong Operating System Administration skills with knowledge of OS internals and core service types.
• Experience in cloud-hosted environments.
• Strong experience with UNIX/Linux and Windows environments.
• Strong analytical/problem-solving skills and cross-functional expertise across multiple IT operational and security disciplines.

Benefits

• Hybrid work schedule requiring employees to work in the office 3 days a week or as directed by their manager/department.