Backend Engineer

About the role

The Business Risk Integrated Control (BRIC) team of TikTok, is missioned to:

• Protect TikTok users, including and beyond content consumers, creators, advertisers.

• Secure platform health and authenticity of community experience .

• Collaborate with cross-functional stakeholders to improve TikTok infrastructures, services, tools and algorithms, towards a higher standard of privacy and security.

​

The BRIC team works to measure and minimize the damage implied by inauthentic behaviors on TikTok and its extended platforms, covering multiple classical and novel integrity/security areas such as fake accounts, fake traffic, spam, scraping, cyberbullying, live room risks, incentive fraud, monetization abuse, etc.

​

We are looking for talented individuals to join our team in 2026. As a graduate, you will get opportunities to pursue bold ideas, tackle complex challenges, and unlock limitless growth. Launch your career where inspiration is infinite at TikTok.

​

Key Responsibilities

• Develop and maintain infrastructure and tools to support the deployment and operation of risk defense algorithms and machine learning models. Contribute to enhancing risk prevention and remediation capabilities across various TikTok business units.

• Support the creation of tools and automated processes to aid in risk analytics and enforcement, under the guidance of senior engineers.

• Help maintain risk control solutions with a focus on data security, privacy, and compliance. Assist in improving the performance and reliability of risk-related services, platforms, and tools.

​

Job Requirements

• Minimum Qualifications

  • Final year or recent graduate with a background in computer science, statistics, or other relevant, machine-learning-heavy majors.

  • Coding skills with exposure to programming in languages such as Python, Java, or C++. Familiarity with Linux environments or an interest in learning distributed systems tools like Spark, Flink, or Kubernetes.

  • Enthusiasm for learning and problem-solving, with a demonstrated ability to work on technical projects (e.g., coursework, internships, or personal projects) involving coding or system design.

• Preferred Qualifications

  • Familiarity with machine learning concepts, infrastructure, or applications through academic projects, internships, or self-study.

  • Exposure to programming in Go or Rust is a plus

  • Strong teamwork and communication skills, with a proactive attitude toward learning and contributing to team goals.

  • Experience with coding projects or internships in a tech-related field is a bonus.

 

Application Security Engineer Graduate

About the role

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

​

We are looking for talented individuals to join our team in 2026. As a graduate, you will get opportunities to pursue bold ideas, tackle complex challenges, and unlock limitless growth. Launch your career where inspiration is infinite at TikTok.

 

Key Responsibilities

As a Graduate Application Security Engineer, you will be at the forefront of our efforts to embed security into the entire product lifecycle. You will work alongside various engineering teams to secure our applications, from design to deployment. Your responsibilities will include:

• Assisting in the design and execution of security assessments, including code reviews, penetration testing, and threat modeling for web and mobile applications.

• Design and develop security tooling to identify vulnerabilities and optimise the product security review process.

• Perform architecture and design reviews to ensure that our applications are implemented to the highest security and privacy standards, thus maintaining and enhancing user trust.

• Work closely with software engineering teams to provide security guidance and co-design complex production systems.

• Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross-functional environment driving towards incident resolution.

​

Job Qualifications

• Minimum Qualifications

  • Final year or recent graduate with a background in Computer Science, Cybersecurity, Software Engineering, or a related technical discipline.

  • Experience in writing and reviewing code in at least two of the following programming languages: Kotlin, Swift, TypeScript, Go, Python, Rust.

  • Solid knowledge and understanding in various disciplines: web application security, mobile app security, network security, applied cryptography. You're expected to be familiar with at least one of these areas.

  • Familiarity with common security risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.

  • Self-driven and capable of coping with ambiguity and applying theoretical concepts in practice.

  • Demostrate interest in cybersecurity.

  • Strong problem-solving skills and excellent debugging / troubleshooting skills.

• Preferred Qualifications

  • CTF players, live competitions and hacking events experience.

  • CVEs such as remote code execution are preferred.

  • BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.