Tech Lead, Digital Forensics - Global Security Organization

The mission of TikToks Global Security Organization is to build and earn trust by reducing risk and securing our businesses and products. Also known as "GSO", this team is the foundation of our efforts to keep TikTok safe, secure, and operating at scale for over 1 billion people around the world. We work to ensure that the TikTok platform is safe and secure, that our users experience and their data remains safe from external or internal threats, and that we comply with global regulations wherever TikTok operates.

Trust is one of TikToks biggest initiatives, and security is integral to our success. In whatever ways users interact with us — whether theyre watching videos on their For

You page, interacting with a Live video, or buying products on TikTok Shop — GSO protects their data and privacy, so they can have a secure and trustworthy experience. The tech lead for forensics develops and enforces standard operating procedures (SOPs), acting as a technical escalation point, and bridging communication between technical and legal teams to ensure the defensibility of data handling. Responsibilities:

• Technical Leadership: Lead data engineers to deliver technical sound and defensible results, drive improvements in forensic processes, research new techniques and tools, and provide technical guidance to forensic teams.
• Platform Management: Oversee the configuration, maintenance, and effective use of eDiscovery/Forensics platforms and related tools.
• Data Integrity and Chain of Custody Management: Guide the entire eDiscovery data lifecycle, including collection, processing, data loading, quality checks, and production.
• Workflow & SOP Development: Create, implement, and enforce standard operating procedures (SOPs) for eDiscovery technical processes.
• Communications and Technical Expertise: Serve as the primary technical resource for resolving complex issues and acting as an escalation point for technical and legal challenges.

Minimum Qualifications

• Deep expertise in digital evidence handling, forensic analysis, proficiency in languages like Python is crucial for building automated data pipelines, scripting, and integrating various software tools.
• Exceptional ability to communicate technical information clearly to both technical and non-technical audiences.
• Strong ability to coordinate complex processes with tight deadlines and manage resources effectively.
• A solid grasp of the EDRM and the legal frameworks governing eDiscovery.
• Forensic tools: Knowledge of both traditional forensic tools (e.g., FTK, EnCase, Autopsy, Relativity, Nuix) and how to integrate their outputs into a larger data processing system.

Preferred Qualifications:

• A bachelors degree in a relevant field such as information systems, computer science, or a related legal technology area.
• Digital forensics process: An understanding of the standard digital forensics process, including the phases of acquisition, preservation, analysis, and reporting.
• Legal and ethical compliance: Knowledge of relevant laws, regulations (like GDPR and CCPA), and ethical considerations surrounding digital evidence collection and privacy.
• Chain of custody: An understanding of the strict procedural requirements for maintaining the integrity and legal admissibility of digital evidence.