Cloud Security Engineer

ByteDance; Singapore; On-site; SGD 80,000 - 120,000; Full time

Job summary

ByteDance is looking for a candidate to enhance the security of overseas cloud products and infrastructure. The role involves risk mitigation, research on cutting-edge security fields, and development with programming languages like Golang or Python.

The ideal candidate will have a good understanding of professional ethics and in-depth knowledge of security technologies such as AI security and devsecops. Preferred applicants will have experience in reporting vulnerabilities and security competitions.

Qualifications

• Familiarity with principles, attack and defense strategies related to risks.
• Proficient in programming languages: Golang, Python, Java, or NodeJS with code review skills.
• Knowledge of security technologies in AI security, devsecops, big data, etc.

Responsibilities

• Responsible for the security construction of ByteDance's overseas cloud products.
• Mitigate operational and configuration risks for cloud products systematically.
• Research new security technologies to enhance industry-leading security.

Skills

Familiarity with common risks

Proficiency in Golang, Python, Java, or NodeJS

In-depth knowledge of AI security

Good sense of professional ethics

Job description

About the Team

The Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

• Responsible for the security construction of ByteDance's overseas cloud products and infrastructure.
• Continuously mitigate operational, configuration, and exposure risks for overseas cloud products and infrastructure, systematically enhancing the security level of business lines.
• Research about cutting‑edge security fields and new attack and defense technologies to enhance the team's leading security technology in the industry.

Minimum Qualifications

• Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.
• Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development.
• In‑depth knowledge of security technologies in one or more of the following fields: AI security, devsecops, big data, networking, virtualization, zero trust.
• A good sense of professional ethics, good interest, and a desire for long‑term development in this field.

Preferred Qualifications

• Candidates who have reported high‑impact vulnerabilities or won famous security competitions (CTF, AWD, Exercise) are preferred.
• Candidates who have good practical results in security of AI or the application of AI in the security field are preferred.