Detection Analyst, Threat Intelligence - Global Security Organization

About the Role

Join TikTok's Global Security Organization (GSO) dedicated to building trust by minimizing risks and safeguarding our products and operations worldwide for over a billion users. GSO ensures the TikTok platform maintains security, data privacy, and regulatory compliance globally, underpinning one of TikTok's key priorities: trust.

As a Detection Analyst, you will leverage your software skills to tackle security challenges by creating systems and processes that convert threat intelligence into scalable detection mechanisms. This role thrives at the intersection of threat intelligence, data engineering, and detection development, contributing directly to tools and pipelines utilized to detect and mitigate risks.

Key Responsibilities

• Develop detection strategies informed by threat intelligence, attacker behavior, fraud detection, and abuse trends.
• Create and maintain high-quality, production-ready data pipelines and tools for ingesting, normalizing, enriching, and serving data used in security detections and investigations.
• Translate threat intelligence reports, indicators, and behavioral patterns into scalable detection content and monitoring solutions.
• Continuously measure and enhance detection effectiveness by tuning logic, minimizing false positives, and expanding detection coverage via data-driven methods.
• Build internal tools and lightweight applications that enable analysts and investigators to efficiently analyze and act upon threat data.
• Collaborate effectively with cross-functional teams including Threat Intelligence, Security Engineering, Product, and business units to design and deploy detection capabilities into production environments.

Required Qualifications

• Solid foundation in software engineering with proven coding experience.
• Proficiency in Python and/or Golang for developing data pipelines, back-end services, APIs, and automation.
• Experience writing maintainable, testable, and production-grade code.
• Experience handling structured and semi-structured data such as logs, event data, and textual intelligence.
• Working knowledge of SQL, data modeling, and schema design supporting detection and investigative workflows.
• Strong interest or background in detection engineering, threat intelligence, security analytics, fraud detection, abuse mitigation, or cybercrime analysis.
• Excellent communication skills enabling clear explanation of technical decisions and translating complex security challenges into engineering solutions.

Preferred Qualifications

• Experience designing detection pipelines, alerting workflows, or security-specific tools.
• Understanding of threat intelligence concepts including indicators of compromise (IOCs), tactics, techniques, and procedures (TTPs), and investigation methods.
• Familiarity with Hive, MongoDB, advanced SQL, and data visualization platforms.
• Background in distributed systems, orchestration of workflows, or processing large-scale data.

About TikTok

TikTok leads the short-form mobile video market with the mission to inspire creativity and bring joy. Headquartered in Los Angeles and Singapore, with multiple offices worldwide, TikTok fosters a globally diverse and inclusive work environment.

Why Join Us

Our culture promotes curiosity, humility, resilience, and impactful teamwork in a fast-growing tech environment. We focus on continuous learning, innovation, and inclusivity, welcoming diverse perspectives and talent to shape meaningful change. Join us in creating a secure, trusted platform for billions worldwide.

Diversity & Inclusion

TikTok is dedicated to cultivating a workplace where skills, experiences, and unique viewpoints are valued equally, reflecting the diverse communities we serve while empowering creativity and joy.