Job Description

About Us Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us At ByteDance, our people are humble, intelligent, compassionate and creative. We create to inspire - for you, for us, and for millions of users across all of our products. We lead with curiosity and aim for the highest, never shying away from taking calculated risks and embracing ambiguity as it comes. Here, the opportunities are limitless for those who dare to pursue bold ideas that exist just beyond the boundary of possibility. Join us and make impact happen with a career at ByteDance.

About the Security Penetration Lab Team at ByteDance The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

• Ability to communicate technical and non-technical concepts to business side.

• To coordinate and make arrangements for security assessments with various product teams.

• To identify risks and actively take ownership to resolve any potential project issues.

• Conduct technical security review for any new products and feature requirements.

• Provide safety engineering support to product teams to help identify potential security flaws in early stages of SDLC.

• Collaborate closely with other parts of the security team and business teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

• Fulfill business side security requirements such as red teaming, fraud detection and penetration tests. Organise resources and improve security maturity for the payment team.

• Monitor and analyze emerging cyber threats, vulnerabilities, and exploits relevant to the payment infrastructure and products.
  

Qualifications

• A background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines. Preferred candidates with experience in communicating with business side on security requirements.

• Good project management skills and focused teamwork.

• Works well under pressure and within time/budget constraints to solve problems or meet objectives.

• Prefer to have worked with payment gateways or businesses.

• Demonstrated teamwork and collaboration skills, in particular in leading or contributing to global and multi-functional teams

• Good knowledge/interest in some of these various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing.
  

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.