Security Analytics Engineer - TikTok Shop

TikTok Shop is a content e-commerce business with international short video product as the carrier. It is committed to becoming the first choice for users to discover and purchase good products with affordable prices. TikTok Shop business team hopes to provide users with more tailored and efficient consumption experience, enabling merchants to receive reliable platform services in different scenarios such as live e-commerce, short video content e-commerce, thereby making more affordable and high-quality products easily accessible and improving lives.

The E-commerce Security team is responsible for safeguarding the platform's security and creating a safe, trustworthy shopping and business environment for TikTok Shop: allowing consumers to shop with confidence, sellers to operate with peace of mind, and influencers to focus on the enjoyment of bringing goods.

Responsibilities: - Responsible for conducting risk analysis, qualitative assessment, and solution design for data leakage threats within TikTok Shop business. Collaborate closely with business operations and BP teams to safeguard data such as e-commerce order information, mitigating risks of data leakage and crawler attacks. - Lead the incident response for internal and external data breach events across the e-commerce ecosystem. Cover high-risk scenarios including internal platforms, logistics vendors, and open platform. Execute breach analysis, emergency response, technical remediation, and root cause governance to prevent recurrence. - Leverage AI technologies (e.g., LLM) to perform root-cause analysis and build monitoring dashboards for regional customer complaints regarding data leaks. Identify fundamental vulnerabilities and design targeted security mitigation strategies. - Conduct deep threat intelligence attribution and forensic investigation for leaked data sources. Trace breach origins and drive remediation execution with relevant stakeholders.

Minimum Qualifications: - Bachelor's or higher degree in Computer Science, Information Technology, Programming & System Analysis, Science (Computer Studies) or related discipline. - 3+ years of experience in data analytics, with proficiency in SQL, Hive, Python, and relevant analytical tools/languages, be able to detect cyber threats and risks by data-driven approaches. - Familiar with the data security lifecycle and understand the data security risks and key tasks at each stage. - Excellent capabilities to investigate, identify, analyze hidden issues from real business risks and security incidents, and provide technical solutions addressing business risk challenges. - Strong business judgment and ability to work independently in a fast-paced, ambiguous environment, strong cross-team communication skills to achieve results.

Preferred Qualifications: - Experienced in security risk mitigation, especially privacy data security and business threat intelligence. - Experienced in E-commerce and retail related business fields. - Strong communication skills to bridge business and technical teams, with the ability to drive projects efficiently from risk detection through solution implementation; proven resilience and stability.