Network security engineer

The TikTok USDS network security team safeguards U.S. user data, end-users, and the internal corporate environment by architecting a strict, zero-trust digital perimeter. They continuously monitor network traffic to proactively detect and neutralize cyber threats across the organization. Additionally, the team engineers robust network infrastructure to support complex operational needs and designs highly secure access architectures that safely connect approved external partners.

• Design, deploy, and maintain secure network architectures across multi-cloud environments (AWS, Azure, and/or GCP), including VPCs, Transit Gateways, Network Security Groups, and Cloud-Native Firewalls.
• Develop and integrate AI-enhanced Network Automation and SOAR (Security Orchestration, Automation, and Response) playbooks to automate threat containment, routine firewall provisioning, and anomalous traffic mitigation.
• Leverage AIOps platforms and machine learning analytics to identify behavioral anomalies, reduce alert fatigue, and predictively route network degradation or security events.
• Manage and optimize Next-Generation Firewalls (NGFW), Intrusion Detection/Prevention Systems (IDS/IPS), and Secure Access Service Edge (SASE) / Zero Trust Network Access (ZTNA) solutions.
• Serve as a Level 2 escalation point for network security incidents, conducting deep-dive packet analysis, threat hunting, and post-incident forensic reviews.
• Ensure all cloud and on-premise network security configurations adhere to industry frameworks (e.g., CIS, NIST, SOC 2) and perform regular automated vulnerability assessments.
• Maintain highly accurate, up-to-date documentation of network topologies, automation scripts, and incident response procedures.
• Mentor Tier 1 SOC and NOC analysts.

• 3+ years of dedicated experience in network security engineering, architecture, or tier-2 operations.
• Proven hands-on experience securing infrastructure in major public clouds (AWS, Azure, or GCP).
• Deep understanding of cloud networking constructs, IAM, and micro-segmentation.
• Strong proficiency in scripting languages (Python, Go, or Bash) and Infrastructure-as-Code (IaC) tools (Terraform, Ansible) to build security automation pipelines.
• Hands-on experience with SOAR platforms (e.g., Palo Alto Cortex XSOAR, Splunk Phantom) and AI-driven network analytics/threat detection tools (e.g., Darktrace, Vectra, or cloud-native ML security hubs).
• Deep understanding of TCP/IP, BGP, OSPF, IPsec/SSL VPNs, DNS, and packet-level analysis (Wireshark, tcpdump).
• Advanced administration experience with enterprise firewalls (e.g., Palo Alto, Fortinet, Check Point).
• Будет плюсом: CCNP Security, PCNSE, AWS Certified Security - Specialty, Azure Security Engineer Associate, or CISSP; Experience deploying and managing SASE platforms (e.g., Zscaler, Prisma Access, Netskope); Understanding of CI/CD pipelines and integrating network security checks into the software development lifecycle

• The company is shifting from a hybrid work model to a fully in-person schedule up to 5 days a week.