Digital Forensics Lead - Global Security Organization

Tiktok • New York, NY

43d

About The Position

The mission of TikTok's Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users' experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates. Trust is one of TikTok's biggest initiatives, and security is integral to our success. In whatever ways users interact with us - whether they're watching videos on their For You page, interacting with a Live video, or buying products on TikTok Shop - GSO protects their data and privacy, so they can have a secure and trustworthy experience. The lead for forensics leads the forensics team, develops and enforces standard operating procedures (SOPs), acting as an escalation point, and bridging communication between technical and legal teams to ensure the defensibility of data handling.

Requirements

• In-depth understanding of computer forensic principles, including digital and mobile forensics, log analysis, cloud-based systems, database structures, querying languages and common digital forensics tools.
• Knowledge and experience of Windows, Unix and Mac host-based forensics, Mobile OS's and command line.
• Working knowledge of hardware configuration and network/data communications, software development and scripting, database technology and database exploitation/forensics.
• Experience with seizure of evidence, chain of custody and conducting analysis.
• Experience in writing affidavits, depositions and serving as an expert witness in court proceedings.
• Knowledge of data loss prevention systems and how they detect potential host and network-based data loss technologies or other insider threat risks.
• Prior experience implementing and running a Digital Forensics program for a large geographic region, including being responsible for maintenance of a Forensic lab.

Nice To Haves

• A bachelor's degree in a computing field.
• 5 or more years of digital forensics analysis experience.
• Digital forensics process: A clear understanding of the standard digital forensics process, including the phases of acquisition, preservation, analysis, and reporting.
• Legal and ethical compliance: Knowledge of relevant laws, regulations (like GDPR and CCPA), and ethical considerations surrounding digital evidence collection and privacy.
• Chain of custody: An understanding of the strict procedural requirements for maintaining the integrity and legal admissibility of digital evidence.
• Holds an industry accepted certification validating digital forensics capabilities: GCIH, GCFA, GCFE, CFCE, GREM, X-PERT, EnCE, CCE, etc.

Responsibilities

• Technical Leadership: lead forensics analysts to deliver technical sound and defensible results, drive improvements in forensic processes, research new techniques and tools, and provide technical guidance to forensic teams.
• Workflow & SOP Development: Create, implement, and enforce standard operating procedures (SOPs) for forensics processes.
• Communications and Technical Expertise: resolve complex issues and acting as an escalation point for technical and legal challenges.
• Lead a team to preserve network and host-based digital evidence in an industry accepted and forensically sound manner that would be admissible in court proceedings.
• Coordinate digital forensics analysis on large scale matters.
• Communicate technical events and analysis to both technical and non-technical audiences.
• Collaborating with cross-functional partners to offer forensic services that meet the needs of the business.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Broadcasting and Content Providers
• Number of Employees: 5,001-10,000 employees