Cyber Security Intern (Threat Detection Response) - 2025 Summer (BS/MS)

Responsibilities

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us
Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.
Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.
To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.
At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.
Join us.

Team Introduction
The Threat Detection and Response (TDR) team is a part of Threat Management Incident Response and Investigation (TMIRI) Pillar under the Global Security Organization (GSO). Also colloquially known as the "Blue Team", we support a multitude of TikTok business units to safeguard the organization's digital estate against cyber threats.

We are looking for talented individuals to join us for an internship in 2025. Internships at TikTok aim to offer students industry exposure and hands-on experience. Turn your ambitions into reality as your inspiration brings infinite opportunities at TikTok.

Internships at TikTok aim to provide students with hands-on experience in developing fundamental skills and exploring potential career paths. A vibrant blend of social events and enriching development workshops will be available for you to explore. Here, you will utilize your knowledge in real-world scenarios while laying a strong foundation for personal and professional growth. This Internship Program runs for 12 weeks beginning in May/June 2025. Successful candidates must be able to commit to one of the following summer internship start dates below:
Monday, May 12
Monday, May 19
Tuesday May 27 (Memorial Day May 26)
Monday, June 9
Monday, June 23

We will prioritize candidates who are able to commit to these start dates. Please state your availability clearly in your resume (Start date, End date).

Candidates can apply to a maximum of two positions and will be considered for jobs in the order you apply. The application limit is applicable to TikTok and its affiliates' jobs globally. Applications will be reviewed on a rolling basis - we encourage you to apply early.


Responsibilities:
- Triaging security alerts and events from various log sources accurately and responding expediently.
- Conduct technical analysis and assessments of security-related incidents, including malware analysis, packet-level analysis, and system-level forensic analysis.
- Conduct analysis of network traffic and output from various network-centric technologies.
- Develop Incident Response Playbooks, perform proactive threat hunts based on threat intelligence gathered.
- Develop SOAR playbooks, automate routine processes, create or enhance detection and response capabilities.

Qualifications

Minimum Qualifications:
- Currently pursuing an Undergraduate/Master degree in Digital Forensics, Cyber or Information Security, Computer Science, Information Technology or related field.
- Able to commit to working for 12 weeks during Summer 2025.
- Ability to work effectively independently and in a fast-paced work environment.
- Experience with scripting languages (e.g. Python, Go and PowerShell) for automation and analysis.
- Fundamental understanding of networking protocols (OSI Layers, TCP/IP, DNS), experience with traffic analysis tools is a bonus (e.g. Wireshark).
- Must obtain work authorization in country of employment at the time of hire, and maintain ongoing work authorization during employment.

Preferred Qualifications
- Graduating December 2025 onwards with the intent to return to degree program after the completion of the internship.
- Excellent communications skills; including writing and verbal for a variety of audiences.
- Experience in working and investigating incidents in Cloud environments (e.g. AWS, GCP).
- Comfortable with Linux, experience operating and investigating incidents in *NIX environments.
- Familiarity with container technologies such as Docker and Kubernetes.


TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environ