Senior Security Engineer (AI/Cloud)

BYTEDANCE PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

ByteDance is seeking a security professional to secure its overseas cloud products and infrastructure. You will conduct security assessments and penetration testing for new and existing cloud offerings.

You will drive risk reduction across overseas environments through vulnerability management and governance, while researching innovative attack/defense methods, including AI-enhanced approaches.

Qualifications

• Familiar with common cyber risks, their principles, attack/defense strategies, and governance approaches.
• Proficient in at least one of Golang, Python, Java, or NodeJS with coding/review ability.
• Strong knowledge in security domains such as AI security, devsecops, networking, or zero trust.

Responsibilities

• Secure ByteDance's overseas cloud products and infrastructure through security assessments and pen testing.
• Continuously reduce risk across overseas cloud infrastructure via vulnerability management and governance initiatives.
• Research new attack/defense tech, and explore AI-assisted methods to enhance security capabilities.

Skills

Golang

Python

Java

NodeJS

Security auditing

Job description

Responsibilities

About the Team The Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities:

1. 1. Responsible for the security construction of ByteDance's overseas cloud products and infrastructure. This mainly involves conducting security assessments of newly launched cloud products and penetration testing of existing cloud products.
2. 2. Continuously reduce the operational, configuration, and exposure risks of overseas cloud products and infrastructure. This includes vulnerability management and promoting the governance of common risks across various infrastructure types through security scoring and special governance initiatives.
3. 3. Research new attack and defense technologies. Discover better vulnerability discovery methods, research better vulnerability defense measures to prevent systems from being easily compromised, and attempt to use AI combined with various technical characteristics to improve attack and defense capabilities.

Qualifications

Minimum Qualification(s):

1. 1. Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.
2. 2. Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development.
3. 3. In-depth knowledge of security technologies in one or more of the following fields: AI security, devsecops, big data, networking, virtualization, zero trust.
4. 4. A good sense of professional ethics, good interest, and a desire for long-term development in this field.

Preferred Qualification(s):

1. 1. Candidates who have reported high-impact vulnerabilities or won famous security competitions (CTF&AWD&Exercise) are preferred.
2. 2. Candidates who have good practical results in security of AI or the application of AI in the security field are preferred.

About Us

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Lemon8, CapCut and Pico as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join ByteDance

Inspiring creativity is at the core of ByteDance's mission. Our innovative products are built to help people authentically express themselves, discover and connect - and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and enrich life - a mission we work towards every day.

As ByteDancers, we strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. By constantly iterating and fostering an \"Always Day 1\" mindset, we achieve meaningful breakthroughs for ourselves, our Company, and our users. When we create and grow together, the possibilities are limitless. Join us.

Diversity & Inclusion

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.