Infrastructure Security Engineer — Secure-by-Design SDLC

ByteDance; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

ByteDance is seeking a security-focused professional to join our Infrastructure Security team in Singapore. The role involves protecting ByteDance's global infrastructure across internal systems, cloud services, and engineering platforms.

You will collaborate with engineering teams to embed secure design principles throughout the lifecycle and contribute to scalable, secure-by-design solutions. The ideal candidate will have hands-on vulnerability discovery experience, strong programming skills

Qualifications

• Bachelor's/ Master's degree in Computer Science, Cybersecurity, Software Engineering or a related discipline.
• Solid understanding of common vulnerability classes, including memory corruption, web security, authentication and authorization issues, and logic flaws.
• Hands‑on experience in vulnerability discovery, security research, penetration testing, or exploit development.
• Experience with one or more programming languages such as C/C++, Go, Python, Rust, or Java.
• Passion for offensive security, infrastructure security, and continuous learning.

Responsibilities

• Team IntroductionOur team is responsible for securing the company's infrastructure across every layer—from internal corporate infrastructure and engineering platforms to externally facing cloud infrastructure.
• We work closely with engineering teams to build security into the entire infrastructure lifecycle through secure design, vulnerability research, security reviews, governance, and automation.
• In this team, you'll have opportunities to have first‑hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure‑by‑design systems and solutions.
• As a member of the Infrastructure Security team, you will focus on 2–3 of the following areas based on your interests, experience, and the team's priorities;
• - Vulnerability Research – Conduct vulnerability research on modern technologies, including cloud‑native platforms, containers, virtualization, operating systems, and distributed systems.
• - Product Security Reviews – Perform security reviews for new products, architectures, and infrastructure components.
• - Security Engineering & AI – Explore and develop AI‑powered solutions for security engineering, including vulnerability discovery, security analysis, code review, and security automation.
• - Security Governance – Develop security standards, best practices, and engineering guidance for infrastructure teams.
• - Security Tooling – Build internal tools to improve vulnerability detection, security testing, and developer experience.

Skills

Vulnerability research

Security testing

Penetration testing

Programming languages

Education

Bachelor's/Master's in CS/Cybersecurity

Tools

Open-source security tooling

Job description

ByteDance is seeking a security-focused professional to join our Infrastructure Security team in Singapore. The role involves protecting ByteDance's global infrastructure across internal systems, cloud services, and engineering platforms.

You will collaborate with engineering teams to embed secure design principles throughout the lifecycle and contribute to scalable, secure-by-design solutions. The ideal candidate will have hands-on vulnerability discovery experience, strong programming skills