Cloud Security Architect, Bytedance

ByteDance; Riyadh; On-site; SAR 180,000 - 300,000; Full time

Job summary

ByteDance's cybersecurity team in Riyadh is seeking a senior Cloud Security Architect to design and secure Volcano Engine and BytePlus cloud environments. You will shape architecture, set security standards, and oversee implementation across IaaS, PaaS, and SaaS.

You will work with cross-functional teams to integrate controls, perform risk assessments and vulnerability testing, and stay ahead of trends in cloud security, zero trust, and container/serverless security.

Qualifications

• Familiar with the principles of common risks, attack and defense strategies; understand how to systematically lead security architecture and risk governance.
• Familiar with cloud-native and infrastructure technologies such as network access, LLM, big data, storage, cloud computing, microservices, zero trust, etc.
• Familiarity with container security technologies (e.g., Docker, Kubernetes) and serverless security best practices.
• Proficient in at least one language in Golang, Python, Java, or NodeJS, capable of code auditing/reviews and development.
• Knowledge of security frameworks and standards (e.g., CIS Benchmarks, GDPR, HIPAA).
• Strong communication and teamwork skills, professional ethics, and keen risk awareness.

Responsibilities

• Design, implement, and oversee cloud security architecture, spanning physical hardware, OS, cloud-native apps, data security and privacy, insider threats and generative AI.
• Develop and enforce cloud security policies, standards, and procedures in line with industry regulations and best practices.
• Conduct security risk assessments, security training, and vulnerability assessments to identify and address security gaps proactively.
• Collaborate with cross-functional teams to integrate security controls into cloud products and underlying infrastructure.
• Stay abreast of emerging cloud security trends, technologies, and threats, providing guidance on security strategies and solutions.

Skills

Cloud security

Kubernetes security

Code auditing

Security frameworks

Risk governance

Communication

Tools

Docker

Kubernetes

Job description

About the team

the Cybersecurity team owns security for all services offered by Volcano Engine & BytePlus which is a cloud service provider owned by ByteDance, including IaaS, PaaS and SaaS. Join our forward-thinking security team dedicated to securing our cloud infrastructure with cutting-edge technologies and best practices. You will have the opportunity to design and implement robust security solutions for our cloud environments, ensuring the protection of sensitive data and the resilience of our systems.

Responsibilities

• Design, implement, and oversee cloud security architecture, encompassing physical hardware, operating system, cloud-native application, data security and privacy protection, insider threats and generative AI.
• Develop and enforce cloud security policies, standards, and procedures in alignment with industry regulations and best practices.
• Conduct security risk assessments, security training, and vulnerability assessments to identify and address security gaps proactively.
• Collaborate with cross-functional teams to integrate security controls into cloud products and underlying infrastructure.
• Stay abreast of emerging cloud security trends, technologies, and threats, providing guidance on security strategies and solutions.

Minimum Qualifications

• Familiar with the principles of common risks, attack and defense strategies; Understand how to systematically lead security architecture and risk governance.
• Familiar with cloud-native and infrastructure technologies such as network access, LLM, big data, storage, cloud computing, microservices, zero trust, etc.
• Familiarity with container security technologies (e.g., Docker, Kubernetes) and serverless security best practices.
• Proficient in at least one language in Golang, Python, Java, or NodeJS, capable of doing code auditing/reviews and development.
• Knowledge of security frameworks and standards (e.g., CIS Benchmarks, GDPR, HIPAA).
• Strong communication and excellent teamwork skills. With professional working ethics, and have a keen risk awareness. Results orientated, aiming for long-term growth in this field.

Preferred Qualifications

• Experience of discovering major impactful vulnerabilities domestically or internationally / winning large-scale security competitions is a plus.
• Priority given to those who have led or participated in large-scale governance, architecture, and design projects.
• Strong understanding of cloud computing platforms (e.g., AWS, Azure, Google Cloud) and cloud security best practices.
• Certifications: CISSP, CISM, OSCP, GIAC Certifications, etc.