Security Engineer, Risk Adversary and Intel Discovery - TikTok BRIC
Security engineer on TikTok's BRIC RAID team in Singapore who researches underground/adversarial ecosystems, analyzes illicit tools and attack techniques, runs adversarial simulations, and turns threat intelligence (including OSINT) into stronger risk-control defenses. Core tech: reverse engineering, threat intel, and at least one of Python, Go, Java, C/C++, or JavaScript.
- Compensation
- Not disclosed
- Location
- Singapore
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Solid understanding of underground ecosystems: adversarial groups, industry chains, attack techniques, and monetization models
- Familiarity with at least one of: Android/iOS/Web reverse engineering, mobile application security, abuse/cheating techniques, fake engagement, incentive abuse, or other adversarial attacks
- Understand common web, mobile, and system vulnerabilities including principles, detection, and remediation
- Stay informed about emerging offensive and defensive security techniques
- Familiarity with core risk control strategies and mechanisms, and ability to evaluate defense effectiveness
- Proficiency in at least one major programming language (Python, Go, Java, C/C++, or JavaScript) plus foundational data analysis and mining skills
- Strong analytical thinking and risk awareness; ability to correlate information across data sources and independently solve complex problems
Nice to have
- Experience with threat intelligence collection and analysis, including OSINT
- Proficiency using domestic and international social platforms or other channels for intelligence gathering and analysis
- Experience building or contributing to enterprise Red Team capabilities, business risk control, threat intelligence, adversarial analysis, or underground ecosystem disruption
- Experience in Red Team operations, penetration testing, or vulnerability discovery, including contributions via a Security Response Center (SRC)
- Proven track record identifying and submitting high-impact vulnerabilities in mobile applications, mini-programs, or web applications
- Strong expertise in threat intelligence analysis, adversary attribution, or technical investigations with established methodologies
- Access to extensive intelligence sources, particularly international or overseas channels
- Experience identifying and mitigating underground ecosystem risks by correlating internal and external data sources
Full description
Responsibilities
Business Risk Integrated Control (BRIC) is a global team protecting ByteDance users, platform health, and the authenticity of community and business ecosystems. We build the risk control algorithms, AI technologies, platforms, and infrastructure behind that work, across products including TikTok, CapCut, Lemon8, and Lark. Our work spans account and content integrity, and safety across advertising and e-commerce.
We apply machine learning across areas such as graph learning, anomaly detection, and multimodal models to understand users, content, behavior, and the relationships between them. The challenge is recognizing genuine activity accurately, so the people using our products never notice the systems working. You will shape the trust, safety, and sustainable growth of ByteDance's global platforms, applying advanced AI to some of the hardest real-world problems in the field.
RAID (Risk Adversary and Intelligence Discovery) focuses on understanding and countering adversarial activities across underground ecosystems. By combining threat intelligence research, adversary analysis, and offensive security assessments, the team helps business teams identify emerging threats, understand attack methods, validate existing defenses, and build comprehensive and measurable risk control capabilities. Responsibilities
- Underground Ecosystem & Threat Intelligence Research: Conduct in-depth research into underground industry chains, adversarial groups, abnormal business activities, and emerging attack trends.
Investigate intelligence techniques such as adversary attribution, threat intelligence monitoring, and intelligence-driven risk identification to provide actionable insights and proactive risk warnings.
- Adversarial Tool & Attack Analysis: Analyze commonly used illicit tools, cheating software, and attack techniques.
Reconstruct attack methods and paths, investigate the underlying technical mechanisms, and identify potential vulnerabilities and gaps in existing risk control strategies.
- Adversarial Simulation & Security Assessment: Approach business systems from the perspective of external adversaries and conduct effective adversarial exercises to evaluate the real-world effectiveness of existing risk control strategies.
Research emerging offensive and defensive security techniques and recommend improvements to detection and defense mechanisms.
- Risk Intelligence Collection & Correlation Analysis: Collect and analyze intelligence from internal and external sources, including OSINT and other relevant intelligence sources.
Correlate information across multiple data sources to identify adversarial groups, trace attack origins, and support the investigation and mitigation of business risks.