US Data Loss Prevention (DLP) Analyst - USDS

Responsibilities About TikTok U.S. Data Security TikTok is the leading destination for short-form mobile video. Our mission is to inspire creativity and bring joy. U.S. Data Security ("USDS") is a subsidiary of TikTok in the U.S. This new, security-first division was created to bring heightened focus and governance to our data protection policies and content assurance protocols to keep U.S. users safe. Our focus is on providing oversight and protection of the TikTok platform and U.S. user data, so millions of Americans can continue turning to TikTok to learn something new, earn a living, express themselves creatively, or be entertained. The teams within USDS that deliver on this commitment daily span across Trust & Safety, Security & Privacy, Engineering, User & Product Ops, Corporate Functions and more. Why Join Us Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible. Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day. To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve. Join us. As a direct report to the lead of US Data Loss Prevention Operations, your primary focus will be helping deliver DLP program objectives by implementing and maintaining TikTok's DLP technology stack. This role requires cross-functional coordination with a team of cyber, privacy, engineering, and data protection analysts to protect data in accordance with relevant geographical regulations, contractual commitments, and confidentiality requirements. The candidate must be experienced in enterprise DLP technology deployments and configurations, and have a strong understanding of DLP strategy, components, and capabilities. The candidate must also have the ability to communicate well, respond quickly and accurately to DLP alerts, and disseminate security information as appropriate in support of TikTok's critical business, go to market, and operational infrastructure needs. In order to enhance collaboration and cross-functional partnerships, among other things, at this time, our organization follows a hybrid work schedule that requires employees to work in the office 3 days a week, or as directed by their manager/department. We regularly review our hybrid work model, and the specific requirements may change at any time. Responsibilities: - Assist in supporting Data Loss Prevention (DLP) technology solutions to protect TikTok data across servers, endpoints, and cloud enviornments - Create and maintain technical architecture diagrams to support DLP landscape - Configure and deploy infrastructure as needed to meet DLP program goals - Interface with Operations and Engineering colleagues to ensure proper maintenance of DLP infrastructure (baseline hardening, system patching, back-ups, etc.) - Design and configure DLP endpoint agent software packages - Establish relationships with key stakeholders across multiple business units to develop, deploy, and operate effective DLP solutions - Assist in the integration of DLP technology with SIEM, UBA, Insider Risk tools, or other relevant technologies - Investigate and improve detection technologies focused on theft or loss of consumer data, employee data, business sensitive data, and/or intellectual property - Create and maintain technical documentation - Support any DLP-related audit or controls testing processes Qualifications Minimum Qualifications: - Bachelors' Degree or industry equivalent work experience in cybersecurity, security architecture, and/or engineering in a converged security program - At least 2 years of experience in Information Security; Security Operations, Data Loss Prevention, Insider Risk - 1+ years of experience developing and responding to DLP alerts or deploying and maintaining DLP systems - Experience working with enterprise data protection technologies such as DLP (Endpoint, Network and Email), User Behavior Analytics (UBA), and Cloud Access Security Brokers (CASB) - Ability to effectively communicate the business value of the DLP program to executive stakeholders - Ability to work as a member of a cross-functional team focused on aligning and supporting the organization's security goals - Ability to quickly assimilate to new knowledge and remain current on new developments in cybersecurity capabilities and industry knowledge Preferred Qualifications: - Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), AWS Certification, GIAC Security Operations Certified (GSOC), GIAC Security Essentials (GSEC), Security+ Certification or applicable experience in the field of Information Security - Familiarity with source code management tools (e.g., Github, Bitbucket) - Experience with endpoint configuration tools, Managed Device platforms (Jamf, Workspace ONE) - Familiarity with securing data across SaaS and IaaS cloud platforms (e.g., AWS, Google Cloud Platform) - Familiarity with database technologies such as Graph databases, Kafka queues, Redis, Mongo and other non-relational databases TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too. TikTok is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at This role requires the ability to work with and support systems designed to protect sensitive data and information. As such, this role will be subject to strict national security-related screening.

Created: 2024-11-05