Security Engineer Graduate (Global E-commerce Security BP) - 2027 start

ByteDance; Singapore; On-site; SGD 42,000 - 72,000; Full time

Job summary

ByteDance seeks a talented security graduate to join the Global E-commerce Security BP team. You will help safeguard ByteDance’s Global E-commerce platforms, participate in threat modeling, code reviews, and security testing across regions.

Fresh graduates must commit to onboarding by year-end and may apply to multiple positions in our company and affiliates. You will collaborate with product, engineering and operations to build secure software, address vulnerabilities, and enhance security

Qualifications

• Bachelor or master in CS, cybersecurity, software engineering or related field.
• Strong understanding of web, app, and system vulnerabilities and remediation.
• Experience with code auditing, penetration testing or threat modeling is a plus.
• Excellent communication and teamwork skills.

Responsibilities

• Conduct vulnerability discovery and risk management for global e-commerce applications.
• Contribute to SDLC/DevSecOps security program, threat modeling, code reviews and security testing.
• Perform security assessments, vulnerability discovery, and work with product teams to improve security.
• Monitor security trends and coordinate incident response with multiple departments.

Skills

Web security fundamentals

Threat modeling

Code review

Penetration testing

Communication skills

Education

Bachelor's/Master's in Computer Science/Cybersecurity/Software Engineering

Tools

Python

Go

Node.js

Java

Job description

Join us as we work together to inspire creativity and enrich life around the globe.

Location:

Team:

Security

Employment Type:

Regular

Job Code:

A07785

Share this listing:

Responsibilities

Team Introduction:We are the Global E-commerce Security BP team. We partner closely with product, engineering and operations to safeguard Global E-commerce (e.g., TikTok Shop) across regions. Our scope covers application security, data security, privacy compliance and architecture security. We build and operate the SDLC/DevSecOps security program, conduct threat modeling, code reviews, penetration testing, red team exercises and vulnerability management, respond to security incidents rapidly and drive systemic fixes. We value pragmatism, ownership and cross-team collaboration, protecting business growth and user trust on a global scale. We are looking for talented individuals to join our team. As a graduate, you will get opportunities to pursue bold ideas, tackle complex challenges, and unlock limitless growth. Successful candidates must be able to commit to an onboarding date by the end of the year. Please state your availability and graduation date clearly in your resume. Candidates can apply to a maximum of two positions and will be considered for jobs in the order you apply. The application limit is applicable to our Company and its affiliates' jobs globally. Applications will be reviewed on a rolling basis - we encourage you to apply early.

• Conduct vulnerability discovery and risk management for global e-commerce business-related applications and APP products, and provide security assurance and support for key projects.


• Participate in the construction and optimization of the SDLC security system and processes, proactively mitigate potential security risks during the design and development phase, and systematically address security risks from the architectural level.


• Responsible for building security-related capabilities and processes, including security assessment, code auditing, penetration testing, vulnerability discovery, and attack and defense drills, and working closely with the product development team to improve the business's security level.


• Track domestic and international security trends and vulnerabilities, respond quickly to security incidents propose solutions and technical analysis, and coordinate with multiple departments to handle them.

Qualifications

Minimum Qualifications

• Individuals who are completing or have recently completed a Bachelor's/ Master's degree in Computer Science, Cybersecurity, Software Engineering, or a related discipline.


• Solid understanding of common Web/App/System vulnerabilities and remediation.


• Strong white-box auditing skills; Able to review Python/Go/Node.js/Java; Capable of automating repetitive tasks.


• Fast learning and analytical problem-solving skills; Keeps up with the latest security trends.


• Excellent communication, collaboration and professional ethhics.

Preferred Qualifications

• Experience building or optimizing SDLC/DevSecOps security programs at scale.


• Deep expertise in one or more areas: application security, data security, privacy compliance, architecture security.


• Experience with red exercises, incident response and cross-regional security operations.

Job Information

About Us

Inspiring creativity is at the core of ByteDance's mission. Our innovative products are built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and enrich life - a mission we work towards every day.

Why Join ByteDance

As ByteDancers, we strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. By constantly iterating and fostering an \"Always Day 1\" mindset, we achieve meaningful breakthroughs for ourselves, our Company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.