Network Security Operations Specialist

Description:

The Global Security Organization provides industry leading security and privacy services to TikTok globally. Our organization uses four principles that guide our strategic and tactical operations. First, we champion trust and transparency, leading the charge in organizational transparency and execution of security and privacy capabilities that drive customer trust. Second, we are a business catalyst and enabler, embodying the DNA of technical innovation. Third, We drive risk informed and empowered decision making, giving our business leaders the information needed to make key decisions. Finally, we proactively identify and reduce risk while enabling innovative product development – to consistently build sustainable world-class security capabilities. 

As a direct report to the Network Security Operations Lead within the Business Operations team, you will be a part of the Security Operations team responsible for Enterprise Defense Operations and Platform Management, Hosting Platform Defense Operations, and Global Security Technology Operations. The Security Operations team's primary focus is management of security and defense platforms, technologies, tools, and services supporting security controls across TikTok's environments. As a Network Security Operations specialist, you will be responsible for supporting the Principal Security Operations Engineer on a team of cross-functional cyber, privacy, and data protection engineers, architects, and analysts to deploy, integrate, and manage, technologies to support the security and protection of data in accordance with relevant geographical regulations, contractual commitments, and confidentiality requirements.

Responsibilities 
- Support the development and execution of enterprise-wide network security programs 
- Implementing regulatory systems in accordance with IT security standards.
- Build technical and functional requirements to configure and deploy network security tooling
- Develop standard operating procedures and trainings for each technology
- Architect and continuously improve security technology stack, process and procedures, support model and cross-function interactions
- Review and investigate alerts generated from network security tools (e.g., firewalls, SWG) and escalate as appropriate 
- Review and assess utilization of network security tooling
- Promote and drive adoption of network security tooling across the enterprise
- Partner across the Security Operations team to respond to cybersecurity incidents 
- Develop and report network security coverage metrics and remediation plans 
- Maintain strong vendor relationships for network security tooling for continuous support
- Define procedures to validate the effectiveness of the design, deployment, and management of security controls that aim to maintain confidentiality, integrity, and availability of networks and technology platforms
- Implement and maintain network security infrastructure globally including Firewalls, DDOS mitigation, VPN, IPS/IDS systems, egress filtering, Cryptography, and Application security
- Securing and supporting high availability of global networks with SLA and 24x7 on-call rotation as per duty schedule
- Excellent analytical and problem-solving skills
- Excellent communication skills (verbal and written), ability to influence without authority
- Works well under pressure within time/budget constraints to solve problems, adjust quickly to shifting priorities, and make decisions with limited information
- Ability to balance risks in ambiguous and complex situations
- Demonstrated teamwork and collaboration skills
- Highly motivated to contribute and grow within a complex area of emerging importance 
- Ability to communicate technical concepts to a broad range of technical and non-technical staff
- Strong understanding of:
 - Interpretation of numeric data and statistical principles
 - Industry standard frameworks
 - Linux, MacOS, and Windows internals
 - Operating and maintaining tools across network security technology stack (e.g., WAF, NIDS NIPS) 

Qualifications

 - Bachelors’ Degree or industry equivalent work experience in cybersecurity, international security architecture, and/or engineering in a converged security program
- 3+ years applicable experience
- High degree of integrity and trustworthiness and the ability to lead and inspire change
- Demonstrate ability to quickly assimilate to new knowledge and remain current on new developments in cybersecurity capabilities and industry knowledge
- Demonstrable experience in building distributed security systems and cross-regional highly available services
- Experience using network diagnosis and packet analysis tools.
- Solid knowledge in routing and switching technologies and protocols TCP/IP, BGP, OSPF, EIGRP, VTP, VRF, STP, VLAN, vPC, HSRP, VRRP, MPLS, QoS, GRE, IP SEC, DNS, TACACS, NTP, SDN, SD-WAN etc.
- Experience with compliance assessments such as NIST, PCI, SOX, and ISO
- Passion for customer service and attention to detail and accuracy
- In-depth experience in the following:
 - Operating system (OS) hardening
 - Antivirus software
 - Metadata management
 - Asset management
 - Change management
 - Microservice architecture
 - Data leakage/content monitoring and filtering
 - Configuration of network and host-based firewalls