Software Engineer; Machine Learning), Insider Risk - Global Security Organization

Responsibilities

The mission of Tik Tok's Global Security Organization (GSO) is to build trust by reducing risk and securing our businesses and products. GSO protects the Tik Tok platform and user data from internal and external threats, ensuring compliance with global regulations.

This Software Engineer role is on the Insider Risk team and is responsible for executing the overall strategy for insider risk, from automation and detection development to triage, containment, and remediation of Insider Risk incidents.

Key responsibilities:

• Execute the overall Insider Risk strategy, including automation and detection engineering.
• Automate tooling solutions and workflows that support investigators and remediate insider trust issues.
• Create and maintain proactive detection logic that identifies insider risks with high fidelity at scale.
• Build and maintain data pipelines for model training, validation, and inference in petabyte‑scale environments.
• Work cross‑functionally with stakeholders to mitigate insider threats, raise analysts’ productivity, and ensure cross‑functional adoption.
• Contribute to technical projects through code contributions, root cause analysis, code reviews, and architecture design.

• Production experience deploying and debugging resource‑efficient binary classifiers for anomaly detection.
• Experience experimenting with different model architectures.
• Experience implementing data pipelines at petabyte scale.
• Proficiency in Python and SQL.
• Proficiency in algebra and statistics.
• Strong technical documentation and reporting skills.
• Ability to handle confidential information with discretion.

• Bachelor’s degree or industry equivalent work experience in Computer Science or Computer Engineering.
• 3+ years of industry experience as a machine‑learning engineer or researcher.
• Knowledge of common data engineering tooling (e.g., Spark, Kafka) and machine‑learning approaches (xGBoost, SVM, etc.) and popular model architectures (LSTM, Transformers, etc.).
• Knowledge of common training frameworks such as PyTorch, Tensor Flow, JAX.
• Understanding of security telemetry (SIEM, EDR, DLP, etc.).
• Working knowledge of cloud platforms (OCI, GCP, AWS, etc.).
• Excellent organizational, time‑management, and problem‑solving skills.
• Works well within time and budget constraints to solve problems or meet objectives.
• Ability to communicate technical concepts to a broad range of technical and non‑technical staff.

Tik Tok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at

Compensation: The base salary range for this position in the selected city is $156,000 – $316,800 annually. Compensation may vary outside of this range based on qualifications, skills, and experience. The base pay is one part of the total compensation package and may be eligible for additional discretionary bonuses, incentives, and restricted stock units.

Benefits: Employees have day‑one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short‑term and long‑term disability coverage, life insurance, wellbeing benefits, and others. Employees also receive 10 paid holidays per year, 10 paid sick days per year, and 17 days of paid personal time (prorated upon hire with increasing accruals by tenure).

Equal Employment Opportunity: For Los Angeles County (unincorporated) candidates: qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Criminal history may affect the following job duties, potentially resulting in a withdrawal of the conditional offer of employment:
1) interacting and occasionally having unsupervised contact with internal or external clients and colleagues;
2) appropriately handling and managing confidential information, including proprietary and trade secret information and access to information technology systems; and
3) exercising sound judgment.