Total 13 manufacturing engineer job vacancies in Legal / Public / Security category in Singapore

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Responsibilities

- Responsible for analysis, investigation and traceability of underground/blackmarket industry cases.

- Perform real-time analysis and trending of security log data from various security devices and systems, leveraging on in-depth analysis of understand industry exploitation chains and knowledge of most underground sources in non-China areas.

- Respond to user incident reports and evaluates the type and severity of security events.

- Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules

- Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.

- Constantly keep up with the latest attacks in the underground industry, identify business logic risks and independently conduct traceability or investigation.

- In-depth understanding of various business risks such as eCommerce/Payment/Advertisment business with the ability to lead discovery, data analysis, investigation, evidence collection, traceability analysis and communication with business teams.

Minimum Qualifications

- More than 3 years of security or anti-fraud work experience with high learning ability.

- Familiar with the various attack methods of the underground industry, experience in penetration testing and data analysis is preferred.

- Good data analysis skills and observation, able to accurately describe and identify attack patterns, and understand key points from large datasets.

- Good communication and coordination skills, strong analytical skills, process management skills, experience in cross-team cooperation, strong execution.

Preferred Requirements

- Automatic data gathering and analysis tools development and scripting skills are preferred.

- Reversing engineering is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

- Propose, plan, and execute Red Team Operations to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards based on realistic threats to the organization.

- Maintain a deep understanding of ByteDance Enterprise Products, how they work, and how they could be attacked or abused.

- Conducts security exercises that emulate real-world threats, TTPs that are most relevant to our organization.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations.

- Collaborate across multiple defense/product teams to propose enhancements and improve current security offerings.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

Strong knowledge in some of these various disciplines: red team operations, infrastructure security, MITRE, TTPs.

- An adversarial mindset to emulate a real-world attacker.

- Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.

Preferred Requirements

- Red Team Experience in an enterprise environment.

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As part of the Security Engineering team, we are responsible for supporting the company's construction of security capabilities and platform services, combining other teams to create efficient and high-quality service docking capabilities, enhancing interactive experience, and lowering the user's barriers to understanding and using security services.

Responsibilities

We are looking for Security Software Engineers to join our Security Engineering team in building the next-generation of ByteDance's product security & privacy infrastructure that furthers our system security and user data privacy protection level, which will impact all ByteDance's products globally. In addition, you will also have opportunities to work closely with product teams across the world. Together we will identify opportunities, define innovative ways to build our users a safe and trustworthy environment, and help us shape the future of ByteDance.

- Research, design, develop, test, maintain and continuously improve ByteDance's product security & privacy Infrastructure and softwares.

- Analyse user needs and security & privacy objectives, develop software solutions, applying principles and techniques of computer science, engineering, and mathematical analysis.

- Update Software, enhances existing software capabilities. Develop and direct software testing and validation procedures to optimize reliability, availability and performance of globally distributed systems.

- Work with multiple cross-functional global teams to integrate hardware and software systems and develop specifications and performance requirements, to deliver high-quality work in rapid product development.

- Deploy, troubleshot and operate large distributed systems.

- Manage individual project priorities, deadlines and deliverables

Minimum Qualifications

- Bachelor's degree and or above in Computer Science, Computer Engineering or other relevant majors.

- Strong knowledge of data structures and algorithms

- Proficiency in at least one server library / framework like Express, Koa, Gin, Kite, Django, etc and at least one kind of database like MySQL, Redis, MongoDB, Hive, ClickHouse, ES, etc and at least one kind of message queue like Kafka, RocketMQ, etc

- Understanding of load-balance, container virtualization, familiarity with NGINX, Docker, K8s, Serverless, etc

- Proficiency in TypeScript, CSS and various layouts, at least one kind of general purpose programming language like Node.js etc

- Understanding of component-based development ideas, familiarity with React.js, Vue.js, or any other equivalent library / framework

- Excellent programming, debugging, and optimization skills in general purpose programming languages

- Ability to think critically and to formulate solutions to problems in a clear, concise and timely manner

Preferred Qualifications

- Experience in cloud-native security services and infrastructure such as Key Management System (KMS), or Public Key Infrastructure (PKI) to serve as a foundation for production infrastructure security. Experience in securing software supply chains to ensure source and build integrity at any stage of the software lifecycle.

- Experience with two or more general purpose programming languages including but not limited to: Go, Node.js, Java, or Python. Preferred familiarity in Rust.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

- Propose, plan, and execute Red Team Operations to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards based on realistic threats to the organization.

- Maintain a deep understanding of ByteDance Enterprise Products, how they work, and how they could be attacked or abused.

- Conducts security exercises that emulate real-world threats, TTPs that are most relevant to our organization.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations.

- Collaborate across multiple defense/product teams to propose enhancements and improve current security offerings.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

Strong knowledge in some of these various disciplines: red team operations, infrastructure security, MITRE, TTPs.

- An adversarial mindset to emulate a real-world attacker.

- Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.

Preferred Requirements

- Red Team Experience in an enterprise environment.

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Responsibilities

- Responsible for analysis, investigation and traceability of underground/blackmarket industry cases.

- Perform real-time analysis and trending of security log data from various security devices and systems, leveraging on in-depth analysis of understand industry exploitation chains and knowledge of most underground sources in non-China areas.

- Respond to user incident reports and evaluates the type and severity of security events.

- Maintain data sources feeding the log monitoring system, develop and maintain detection and alerting rules

- Identify recurring security issues and risks and develops mitigation plans and recommends process improvements.

- Constantly keep up with the latest attacks in the underground industry, identify business logic risks and independently conduct traceability or investigation.

- In-depth understanding of various business risks such as eCommerce/Payment/Advertisment business with the ability to lead discovery, data analysis, investigation, evidence collection, traceability analysis and communication with business teams.

Minimum Qualifications

- More than 3 years of security or anti-fraud work experience with high learning ability.

- Familiar with the various attack methods of the underground industry, experience in penetration testing and data analysis is preferred.

- Good data analysis skills and observation, able to accurately describe and identify attack patterns, and understand key points from large datasets.

- Good communication and coordination skills, strong analytical skills, process management skills, experience in cross-team cooperation, strong execution.

Preferred Requirements

- Automatic data gathering and analysis tools development and scripting skills are preferred.

- Reversing engineering is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Minimum Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

Job Responsibilities

1. Responsible for the security construction of ByteDance's overseas cloud products and infrastructure.

2. Continuously mitigate operational, configuration, and exposure risks for overseas cloud products and infrastructure, systematically enhancing the security level of business lines.

3. Liaise with overseas business lines to manage security risk assessments, incident response, security training, and more.

Minimum Qualifications

1. Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches.

2. Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development.

3. Knowledge of cloud-native and infrastructure technologies, such as network access, large models, big data, storage, cloud computing, microservices, and zero trust.

4. Strong communication and collaboration skills, a good sense of professional ethics, keen risk awareness, and a results-oriented mindset with a desire for long-term development in this field.

Preferred Qualifications

1. Candidates who have reported high-impact vulnerabilities or won major security competitions are preferred.

2. Experience in leading or participating in large-scale project governance, architecture, or design is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

As a part of ByteDance's Security Department, the Security Governance and Compliance team plays a pivotal role in supporting various business lines. This involves offering expertise in security governance and compliance by implementing robust information security management systems. The team is dedicated to tailoring solutions that address key aspects such as data security, privacy protection, and regulatory compliance. Moreover, they actively pursue and obtain a multitude of security compliance qualifications and certifications essential for the diverse business lines. Additionally, the team actively engages in shaping industry standards for security and privacy, while also conducting advanced research to anticipate and navigate future risks and opportunities.

Job Description:

1. Stay abreast of the latest developments of laws, regulations, policies and information security standards related to Network Security, Data Security and Data protection. Ensure timely updates and maintenance of the internal information security management system.

2. Apply for information security certifications such as ISO 27001, SOC and PCI for our products.

3. Advocate for and oversee the implementation of security compliance and privacy protection requirements. Promptly address and rectify any non-compliant items.

4. Validate and verify that the organization's security controls meet industry requirements. Conduct thorough examinations of processes, systems, policies, procedures, network diagrams, and system configurations.

5. Monitor business activities through collaborating with cross-functional team leaders to guarantee ongoing compliance with external certifications.

Minimum Qualifications:

1. More than 3 years of relevant experience in managing ISO 27001:2022, SOC 2 audit, and compliance programs within a global organizational setting.

2. Demonstrate extensive knowledge and hands-on experience with cybersecurity frameworks, such as ISO 27001, PCI-DSS, SOC 2, and other relevant regulatory requirements.

3. Exhibit excellent communication skills, logical reasoning abilities.

4. Maintain a calm and composed demeanor , showcasing a robust commitment to continuous learning and a collaborative, team-oriented mindset.

5. Display self-driven and results-oriented attributes, enjoy challenging tasks, demonstrate a genuine enthusiasm for work, and work well under pressure.

Preferred Qualifications:

1. Experience in ISO management systems, SOC audit, and PCI certification is preferred.

2. Relevant industry certifications such as CISM, CISA, CISSP is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Penetration Lab Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Assurance Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About ByteDance

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Security Penetration Lab Team at ByteDance

The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

Responsibilities

- Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment.

- Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.

- Certify infrastructure components, systems and applications that meet security standards.

- To identify risks and actively take ownership to resolve any potential project issues.

- Conduct technical security reviews for any new products and feature requirements.

- Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC.

- Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures.

- Continuously conduct security research and strive to innovate.

Qualifications

- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.

- Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security.

- Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.

- Good project management skills and focused teamwork.

Preferred Requirements

- CTF players, live competitions and hacking events experience.

- CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

- BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

About the Company

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

About the Team

Our team is committed to ensuring the secure deployment of LLM/AIGC applications, working closely with the business team to deliver secure large models and applications, and ensuring the security and privacy of user data. We focus on innovating security solutions for the arising LLM/AIGC applications, such as SDLC、data privacy solution、model vulnerability detection and mitigation、and security applications based on large models.

Our team members have extensive security experience and technical expertise, committed to providing users with the most secure LLM/AIGC application experience. If you have a passion for security and are willing to contribute to protecting the security and privacy of users, we welcome you to join our team!

Responsibilities

- Discover AI model vulnerabilities and assess the security of production AI systems by executing Red Team Operations. Support the production of scalable and optimized machine learning models.

- Focus on building algorithms for the extraction, transformation and loading of large volumes of realtime, unstructured data to deploy AI/ML solutions from theoretical data science models.

- Develop offensive emulation and vulnerability discovery techniques and tools specific for AI security

- Run experiments to test the performance of deployed models, and identifies and resolves threats that arise in the process.

- Design techniques and solutions for mitigating AI model vulnerabilities

- Work in a team setting and apply knowledge in statistics, scripting and programming languages required by the firm.

- Work with the relevant software platforms in which the models are deployed.

- Research on AI-sepcific security threats including prompt injection, backdoor, privacy extraction.

Qualifications

- 1 year or above working experience in AI security, master’s degree or above, majoring in computer science, artificial intelligence, and information security, etc.

- Proficient in Python/C/C++, familiar with common AI development frameworks, and having a solid foundation in data structures, algorithm design, and machine learning theory.

- A strong background in mining AI model vulnerability, designing protection schemes for AI systems, interpretability AI, and AI training/reasoning framework design.

- Those who have papers on AI security related top conferences are preferred.

- Strong logical thinking ability, good at discovering and solving problems, self-driven.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.