Total 23 job vacancies by Bytedance Pte. Ltd.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of ByteDance's Security Department, Security BP team is not only responsible for the security and risk management of the Monetization business, but also plays an important role in connecting and building trust between the business and security team. Leveraging on various capabilities provided by the Security Department, we ensure the business and customer data are secured by providing high-quality services to the Monetization business, such as platform security, product security, business security and compliance governance.

Responsibilities

- Ability to communicate technical and non-technical concepts to the business side.

- To coordinate and make arrangements for security assessments with various product teams.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct cyber risk assessment/technical security reviews in support of technologies initiatives to help identify IT related risk fr any new products and feature requirements, as well as determine appropriate controls to mitigate risks.

- Collaborate closely with other parts of the security team and business teams to design defense-in-depth controls that limit attackers' ability and improve our security posture.

- Fulfil business side security requirements such as red teaming, fraud detection and penetration tests. Organise resources and improve security maturity for the Monetization team.

- Monitor, track, and manage risk mitigations and exceptions and ensure adequate monitoring capability is incorporated into solutions.

- Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to the Monetization infrastructure and products.

Minimum Qualifications

- Minimum Bachelor's Degree in Computer Science, Computer Engineering, Information Systems or other STEM disciplines. Preferred candidates with experience in communicating with the business side on security requirements.

- Proven track record in managing a high-performing team for at least 2 years with excellent leadership skills.

- Good project management skills and focused teamwork.

- Works well under pressure and within time/budget constraints to solve problems or meet objectives.

- Demonstrated teamwork and collaboration skills, in particular in leading or contributing to global and multi-functional teams

- Good knowledge/interest in some of these various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing.

Preferred Qualifications

- Passionate about self-studying cutting edge technologies and staying relevant.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

1. Responsible for the security construction of ByteDance's overseas cloud products and infrastructure.

2. Continuously mitigate operational, configuration, and exposure risks for overseas cloud products and infrastructure, systematically enhancing the security level of business lines.

3. Liaise with overseas business lines to manage security risk assessments, incident response, security training, and more.

Minimum Qualifications

1. Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.

2. Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development.

3. Knowledge of cloud-native and infrastructure technologies, such as network access, large models, big data, storage, cloud computing, microservices, and zero trust.

4. Strong communication and collaboration skills, a good sense of professional ethics, keen risk awareness, and a results-oriented mindset with a desire for long-term development in this field.

Preferred Qualifications

1. Candidates who have reported high-impact vulnerabilities or won major security competitions are preferred.

2. Experience in leading or participating in large-scale project governance, architecture, or design is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet security standards in the staging/production environment.

- Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross-functional environment driving towards incident resolution.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- To identify risks and actively take ownership to resolve any potential security project issues.

- Continuously conduct security research and strive to innovate.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- Experience in independent supporting the application security of a business line

- CTF players, BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Responsibilities

- Responsible for analysis, investigation and traceability of underground/blackmarket industry cases.

- Perform real-time analysis and trending of security log data from various security devices and systems, leveraging on in-depth analysis of understand industry exploitation chains and knowledge of most underground sources in non-China areas.

- Respond to user incident reports and evaluates the type and severity of security events.

- Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules

- Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.

- Constantly keep up with the latest attacks in the underground industry, identify business logic risks and independently conduct traceability or investigation.

- In-depth understanding of various business risks such as eCommerce/Payment/Advertisment business with the ability to lead discovery, data analysis, investigation, evidence collection, traceability analysis and communication with business teams.

Minimum Qualifications

- More than 3 years of security or anti-fraud work experience with high learning ability.

- Familiar with the various attack methods of the underground industry, experience in penetration testing and data analysis is preferred.

- Good data analysis skills and observation, able to accurately describe and identify attack patterns, and understand key points from large datasets.

- Good communication and coordination skills, strong analytical skills, process management skills, experience in cross-team cooperation, strong execution.

Preferred Requirements

- Automatic data gathering and analysis tools development and scripting skills are preferred.

- Reversing engineering is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

- Propose, plan, and execute Red Team Operations to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards based on realistic threats to the organization.

- Maintain a deep understanding of ByteDance Enterprise Products, how they work, and how they could be attacked or abused.

- Conducts security exercises that emulate real-world threats, TTPs that are most relevant to our organization.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations.

- Collaborate across multiple defense/product teams to propose enhancements and improve current security offerings.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

Strong knowledge in some of these various disciplines: red team operations, infrastructure security, MITRE, TTPs.

- An adversarial mindset to emulate a real-world attacker.

- Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.

Preferred Requirements

- Red Team Experience in an enterprise environment.

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve. Join us.

About team

The privacy and security team of ByteDance is committed to building a configurable and easy-to-use platform to manage all data of ByteDance internal systems to meet global and ever-changing privacy & compliance requirements. We provide easy to use services mainly to: all R&D personnel, legal teams, data protection teams, etc. within ByteDance. The PnS SRE team is committed to planning, building, and operating distributed ByteDance compliance data centers in multiple regions around the world; establishing a sound monitoring and alarm mechanism, organizing and participating in fault drills; identifying risks and resolving or promoting architecture upgrades.

Responsibilities

1. Focus on compliance data center's lifecycle management, cost reduction, efficiency improvement, and stability;

2. Be responsible for reliability and stability of ByteDance's compliance data center, and be responsible for the SLA of related core PnS products;

3. Participate in the design/development/improvement of stability-related products, including but not limited to efficiency, stability and others;

4. Review the current architecture, identify application architecture risks, and solve or promote solutions to resolve/reduce architectural risks;

5. Build/improve the monitoring and alarm mechanism, downgrade and contingency plan, organize and participate in drills, bleed-stopping, accident review and other stability work;

6. Be passionate about architecture, cutting-edge technology and software development procedures, and be able to continuously improve operation and maintenance procedures, stop-bleeding plans, and improve the overall service operation quality; apply new technologies to serve teams and businesses.

Qualifications

Minimum Qualifications

1. Bachelor’s degree in Computer Science or equivalent with 3+ years of relevant experience；

2. Solid computer software basic knowledge; understanding Linux operating system, storage, network IO and other related principles;

3. Working experience with one or more of the following programming languages: Python/Go/C++;

4. Good communication and collaboration skills;

5. Proven experience in analyzing and troubleshooting distributed systems;

Preferred Qualifications

1. Ability to thrive in a fast-paced environment;

2. Have good product sense, solid system design ability;

3. Have systematic/structured thinking and problem-solving skills, and a strong sense of ownership;

4. Experience in large-scale distributed systems in the field of SAAS/PAAS/IAAS is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Data Security Management & Governance team is responsible for managing and mitigating data security risks posed within the organisation. To identify the data security risks and enhance the company's security management level, this team is responsible for the construction of the company's data security management system, defining the identification of security risks, and driving the implementation of security governance solutions. This team is also accountable for compiling company data security management regulations/polices, optimizing data security management processes, and operating the internal security platform.

Responsibilities

1. Accountable for establishing and maintaining data security metrics, conducting systematic monitoring of indicators, and performing attribution analysis. Measure the company's security level from multiple dimensions and provide risk inputs for data security governance.

2. Responsible for the construction of the company's data security management system, defining the identification of security risks, and driving the implementation of security governance solutions to enhance the company's security management level and collaborative capabilities.

3. Write company data security management regulations/polices, optimize data security management processes, and innovate data security management methods.

4. Responsible for the operation of the internal security platform. Develop effective operational plans and processes in line with business and platform development goals. Handle daily operational issues of the platform and respond to and drive the resolution of business-related problems.

Minimum Qualifications

1. Bachelor's degree or above, with a preference for majors in Mathematics, Statistics, Management, or Computer Science.

2. Minimum of 3 years of work experience, with a preference for experience in security governance, access management, consulting, or security platforms-related work.

3. Excellent communication skills with logical thinking ability.

4. Calm and composed personality, a strong inclination towards learning, and a team-oriented mindset.

5. Self-driven and results-oriented, enjoys challenging tasks, demonstrates enthusiasm for work, and can handle job pressures.

Preferred Qualifications

1. Have experience with other internet technology companies and work as a data security IC or leader.

2. Be able to use large models or have data analysis capabilities.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Engineering Team

The security engineering team is missioned to build security services, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. You also have opportunities to go through the whole lifecycle of security products or services, are encouraged to participate in each phase, each part of the projects and have the whole picture of what we are working on.

We count on our site reliability engineers (SREs) to empower our users with high availability and stellar performance level to pursue their missions from security perspective. As we expand our business in APAC, we are currently seeking experienced SRE to deliver insights from massive-scale security systems in real time. You will not only address those regular day-to-day technical problems but also are encouraged to bring fresh ideas, investigate the existing infrastructure, identify problems, and develop new solutions to those challenges of a kind not previously addressed by big tech. We are moving fast while expanding on a large scale (1B+ users). This role assumes a huge impact and plays a key role in the company's business.

Responsibilities

1. Lead or drive an SRE team to design and implement the security SRE framework for the company's security infrastructure, and build cutting-edge SRE technologies for system deployment, upgrade, capacity planning and rapid troubleshooting and disaster recovery.

2. With cutting edge technologies, drive the implementation and the improvement of automation and the intelligence of the SRE infrastructure and evolve it into a platform; build solutions to measure and monitor availability, scalability, latency and overall system health of security products and services developed by partner teams, and improve the efficiency and sustainability of system maintenance.

3. Drive the design and development of the SRE infrastructure and maintenance tools for the full lifecycle of security system development; support the rapid iteration and system reliability of the company's security services.

4. Coordinate support to cross-functional teams and external customers with security products and services.

5. Responsible for building, scaling, managing and coaching the SRE team, as well as driving technical decisions as a leader.

Minimum Qualifications

1. Bachelor's Degree and above, with minimum 5+ years of relevant experience in developing and maintaining large-scale distributed SRE platform/tooling with automation.

2. Solid programming skills, mastering at least one of the programming skills such as Go/Java/Python/Shell, and being able to deliver high quality code; Familiar with at least one of the web frameworks, such as Gin/Django/Spring, with a decent understanding of their design principles.

3. Experienced and hands-on skills in debugging, troubleshooting and optimization of sophisticated distributed systems and platforms

4. Deep understanding of OS (Linux, windows), Network (TCP/IP, HTTP, etc), with good exposure to network, storage, as well as computer architecture.

5. Familiar with Redis/MySQL/PostgreSQL database architecture and working principle, familiar with daily operation and maintenance including but not limited to high availability cluster construction, monitoring, backup, fault handling, Performance optimization.

6. Familiar with cloud native framework with experience in Kubernetes. Good experience with SRE tools such as Ansible, ELK, Prometheus and Grafana.

Preferred Qualifications

1. Passionate about self-studying cutting edge technologies and staying relevant. Strong communication and collaboration skills, and willing to take ownership.

2. Proven track record in managing a high-performing SRE team for at least 2 years with excellent technical leadership skills.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of the Security Engineering team, we are responsible for supporting the company's construction of security capabilities and platform services, combining other teams to create efficient and high-quality service docking capabilities, enhancing interactive experience, and lowering the user's barriers to understanding and using security services.

Responsibilities

We are looking for Security Software Engineers to join our Security Engineering team in building the next-generation of ByteDance's product security & privacy infrastructure that furthers our system security and user data privacy protection level, which will impact all ByteDance's products globally. In addition, you will also have opportunities to work closely with product teams across the world. Together we will identify opportunities, define innovative ways to build our users a safe and trustworthy environment, and help us shape the future of ByteDance.

- Research, design, develop, test, maintain and continuously improve ByteDance's product security & privacy Infrastructure and softwares.

- Analyse user needs and security & privacy objectives, develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.

- Update Software, enhances existing software capabilities. Develop and direct software testing and validation procedures to optimize reliability, availability and performance of globally distributed systems.

- Work with multiple cross-functional global teams to integrate hardware and software systems and develop specifications and performance requirements, to deliver high-quality work in rapid product development.

- Deploy, troubleshot and operate large distributed systems.

- Manage individual project priorities, deadlines and deliverables

Minimum Qualifications

- Bachelor's degree and or above in Computer Science, Computer Engineering or other relevant majors.

- Strong knowledge of data structures and algorithms

- Proficiency in at least one server library / framework like Express, Koa, Gin, Kite, Django, etc and at least one kind of database like MySQL, Redis, MongoDB, Hive, ClickHouse, ES, etc and at least one kind of message queue like Kafka, RocketMQ, etc

- Understanding of load-balance, container virtualization, familiarity with NGINX, Docker, K8s, Serverless, etc

- Proficiency in TypeScript, CSS and various layouts, at least one kind of general purpose programming language like Node.js etc

- Understanding of component-based development ideas, familiarity with React.js, Vue.js, or any other equivalent library / framework

- Excellent programming, debugging, and optimization skills in general purpose programming languages

- Ability to think critically and to formulate solutions to problems in a clear, concise and timely manner

Preferred Qualifications

- Experience in cloud-native security services and infrastructure such as Key Management System (KMS), or Public Key Infrastructure (PKI) to serve as a foundation for production infrastructure security. Experience in securing software supply chains to ensure source and build integrity at any stage of the software lifecycle.

- Experience with two or more general purpose programming languages including but not limited to: Go, Node.js, Java, or Python. Preferred familiarity in Rust.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As a part of ByteDance's Security Department, the Security Governance and Compliance team plays a pivotal role in supporting various business lines. This involves offering expertise in security governance and compliance by implementing robust information security management systems. The team is dedicated to tailoring solutions that address key aspects such as data security, privacy protection, and regulatory compliance. Moreover, they actively pursue and obtain a multitude of security compliance qualifications and certifications essential for the diverse business lines. Additionally, the team actively engages in shaping industry standards for security and privacy, while also conducting advanced research to anticipate and navigate future risks and opportunities.

Job Description:

1. Stay abreast of the latest developments of laws, regulations, policies and information security standards related to Network Security, Data Security and Data protection. Ensure timely updates and maintenance of the internal information security management system.

2. Apply for information security certifications such as ISO 27001, SOC and PCI for our products.

3. Advocate for and oversee the implementation of security compliance and privacy protection requirements. Promptly address and rectify any non-compliant items.

4. Validate and verify that the organization's security controls meet industry requirements. Conduct thorough examinations of processes, systems, policies, procedures, network diagrams, and system configurations.

5. Monitor business activities through collaborating with cross-functional team leaders to guarantee ongoing compliance with external certifications.

Minimum Qualifications:

1. More than 3 years of relevant experience in managing ISO 27001:2022, SOC 2 audit, and compliance programs within a global organizational setting.

2. Demonstrate extensive knowledge and hands-on experience with cybersecurity frameworks, such as ISO 27001, PCI-DSS, SOC 2, and other relevant regulatory requirements.

3. Exhibit excellent communication skills, logical reasoning abilities.

4. Maintain a calm and composed demeanor , showcasing a robust commitment to continuous learning and a collaborative, team-oriented mindset.

5. Display self-driven and results-oriented attributes, enjoy challenging tasks, demonstrate a genuine enthusiasm for work, and work well under pressure.

Preferred Qualifications:

1. Experience in ISO management systems, SOC audit, and PCI certification is preferred.

2. Relevant industry certifications such as CISM, CISA, CISSP is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Internal Security Risk Management & Governance team is responsible for managing and mitigating information security risks posed within the organisation. To ensure that the company's risk management and governance strategies are up to date and aligned across the organisation, this team is responsible for regular industry benchmarking and working with stakeholders from cross-functional teams to perform regular risk assessments and align risk mitigation strategies. This team is also responsible for managing the optimization, operation, training, and data analysis of the internal threat platform and UEBA (User and Entity Behavior Analytics) platform within the company.

Responsibilities

- Develop and maintain the organization's insider risk security governance framework, including policies, procedures, and standards that align with industry best practices and regulatory requirements.

- Conduct regular security risk assessments to identify vulnerabilities and risks, and work with relevant departments to develop mitigation strategies.

- Provide guidance and support for compliance with data protection laws, regulations, and standards (e.g., GDPR, ISO 27001, SOC 2).

- Coordinate with IT and business units to ensure insider threat security measures are integrated into technology projects and business processes.

- Translate business and technology requirements into relevant insider threat rules for operational teams to implement

- Monitor and report on the effectiveness of security controls and the status of security risks to senior management.

- Develop and lead security awareness training programs to educate employees on security best practices and emerging threats.

- Stay abreast of the latest security trends, threats, and technologies to continuously improve the organization's insider threat security posture.

Minimum Qualifications

- Bachelor's or master's degree in Information Security, Computer Science, Information Technology, or a related field.

- Professional certifications such as CISSP, CISM, CRISC, or CGEIT are highly desirable.

- A minimum of 5 years of experience in information security, risk management, or IT governance, with at least 2 years in a leadership role.

- Strong knowledge of information security principles, frameworks (e.g., NIST, ISO 27001), and regulations (e.g., GDPR, CCPA).

- Experience with security risk assessment methodologies and tools.

- Familiarity with data analysis tools and software to support risk analysis and reporting efforts, ensuring data-driven decision-making in the risk management process.

- Skilled in creating and maintaining risk registers, developing risk treatment plans, and effectively communicating risk posture to stakeholders at all levels of the organization.

- Excellent communication and interpersonal skills, with the ability to engage and influence stakeholders at all levels.

- Strong analytical and problem-solving skills.

- Proven ability to manage and prioritize multiple projects and tasks.

Preferred Qualifications

- Experience with designing, implementation and operation of commercial or in-house UBA/UEBA solutions (e.g., Splunk, Exabeam) are highly desirable

- Experience with threat modeling methodologies (e.g., STRIDE, PASTA) to analyze and assess security threats within software applications, systems, and networks.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Lead and manage a team of passionate individuals focused on improving the security posture of the company's products and systems.

- Develop positive and trusted relationships with business partners both inside and outside of the company.

- Ensure individual support and talent development for direct reports, leading the team in terms of technical excellence and practicing ByteStyle principles.

- Design and perform tests and check cases to analyze design, architectures, existing systems services, operating systems, networks and applications from a security perspective, via black box testing, code reviews, automation, threat modeling and research. This is to meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross-functional environment driving towards incident resolution.

Qualifications

- Bachelor's degree in Information Security, Computer Science, Computer Engineering, Electrical Engineering, or other relevant majors.

- 5+ years of security engineering experience such as design review, threat modeling, security mitigation development, security tooling development or privacy engineering.

- 2+ years of people management in an engineering organization, strong leadership skills and stress-resistance.

- Advanced knowledge and understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing. You're expected to be an expert in at least one of these areas.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Strong problem-solving skills and excellent debugging / troubleshooting skills.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Penetration Lab Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

Our Cloud Security Solution team is responsible for the Go To Market of cloud security products, and aims the success of product commercialization.

Responsibilities

1. Responsible for developing security products targeting customers in Southeast Asia region, and identifying potential business opportunities.

2. Deeply understand customer requirements, develop cutting-edge solutions as a technical expert, provide consulting services to our partners.

3. Familiar with cloud security products and able to deliver matured solutions in different attack and defense scenarios.

Qualifications

1. More than 5 years of experience in developing security solutions, with a proven track record in operating security operations that exceeds 1 million USD.

2. Have experience in exploring solution scenarios, and have practical applications and best practices.

3. Be familiar with the principles and protection methods of common cloud security products, including at least three areas such as application security, host security, network security, identity security, data security, and security operations.

4. Possess strong communication skills and teamwork spirit; willing to take calculated risk; strong professional working ethics; result-oriented.

5. Proven track record in developing overseas cloud security markets is highly preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.