Security Software Engineer Project Intern

About the Role: Security Software Engineer Project Intern

As a Security Software Engineer Project Intern at TikTok, you will join a team dedicated to building robust infrastructures, platforms, and technologies to safeguard our users, products, and overall infrastructure. This unique opportunity offers first-hand exposure to TikTok's strategic security initiatives, particularly in developing scalable and secure-by-design systems. You'll tackle novel challenges not typically addressed by established tech companies, contributing to fast-paced, high-scale solutions that make a real difference.

This project intern role provides the chance to engage in impactful short-term projects, offering a glimpse into professional real-world experience. You will acquire practical skills through hands-on learning in a dynamic work environment, deepening your understanding of your career interests. Applications are reviewed on a rolling basis, so early application is encouraged. Successful candidates must commit to an internship period of at least 3 months.

Responsibilities

• Participate in security assessments, including penetration tests, on both web and mobile applications.
• Contribute to tooling development projects with a strong security focus, such as code review and API testing. These tools will leverage LLM integration.
• Develop customized code scanning tools that utilize AI to enhance detection accuracy and trace vulnerability propagation paths.

Minimum Qualifications

• Currently pursuing an undergraduate or postgraduate degree in Computer Science, Computer Engineering, Information Systems, or another STEM discipline.
• Possess security engineering experience in areas like threat modeling, security mitigation development, security tooling development, or privacy engineering.
• Demonstrate understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, and cloud computing. Expertise in at least one of these areas is expected.
• Experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node.js), Go, Python, Java, C++, Rust.
• Strong problem-solving skills and excellent debugging/troubleshooting capabilities.

Preferred Qualifications

• Experience with Natural Language Processing (NLP) or Large Language Models (LLM).
• Knowledge of distributed systems, edge computing, or high-performance network programming.

Key skills/competency

• Security Assessment
• Penetration Testing
• Web Application Security
• Mobile Application Security
• Security Tooling
• AI Integration
• LLM Integration
• Vulnerability Detection
• Programming (Python, Go, Java)
• Threat Modeling