ByteDance

Responsibilities

About the team:

Global E-commerce is a content E-commerce business with international short video product as the carrier. It is committed to becoming the first choice for users to discover and purchase good products with affordable prices. Global E-commerce business team hopes to provide users with more tailored and efficient consumption experience, enabling merchants to receive reliable platform services in different scenarios such as live E-commerce, short video content E-commerce, so as to make more affordable and high-quality products sell easily and a better life within reach.

The Security Platform team is responsible for safeguarding the platform's security and creating a safe, trustworthy shopping and business environment for Global E-commerce: allowing consumers to shop with confidence, sellers to operate with peace of mind, and influencers to focus on the enjoyment of bringing goods.

In order to enhance collaboration and cross-functional partnerships, among other things, at this time, our organization follows a work schedule that requires employees to work in the office 5 days a week, or as directed by their manager/department. We regularly review our work model, and the specific requirements may change at any time.

Responsibilities:

• Responsible for building the overall data security defense line for the Global E-commerce platform, designing comprehensive prevention and control plans for user-sensitive information and commercial data.
• Monitor and analyze emerging cyber threats, vulnerabilities, and exploits related to our infrastructure and products.
• Research new methods and technologies for detecting cyber threats, identifying signals, and developing data-driven approaches that utilize these signals to detect security threats and breaches.
• Conduct Data Leakage Prevention and internal data management through multiple channels such as platform, ecosystem, and office, ensuring minimal data usage and proper disclosure to protect the privacy and confidentiality of consumers, merchants, and the platform.
• Work with the big data stack, designing and developing highly scalable systems for full data lifecycle protection, including but not limited to data classification, access control, encryption, masking, auditing, and alerting.
• Design a sensitive data prevention and control solution for the Global E-commerce full-link platform, successfully implementing the overall solution through cross-team collaboration to ensure that the risk of data being crawled and stolen is controllable.
• Based on the data usage scenarios of downstream partners and ecological ISVs, design data disclosure and reasonable usage plans, standardizing appropriate data usage by third-party partners to ensure downstream sensitive data is not misused or stolen.
• Develop an overall reasonable usage plan for Global E-commerce data within office and production environments, ensuring that key business data and personal privacy data are not misused or stolen through proper data lifecycle management.

Qualifications

Minimum Qualifications:

• A bachelor’s degree in computer science, engineering, or a related field.
• 5+ years of related experience in data security.
• Familiar with computer network principles, understanding of HTTP principles and operating mechanisms, and capable of HTTP log auditing and analysis.
• Data analysis capabilities: Have big data analysis and development capabilities in the Hive environment, and be able to discover threats and risks based on data analysis.
• Security attack and defense capabilities: Familiar with the principles and utilization methods of security vulnerabilities that can lead to data leakage (server/client), and have relevant vulnerability repair and solution reinforcement capabilities.
• Experience in the construction of data security prevention and control links.
• Practical experience and capabilities in the best practices and solution construction processes for preventing various data leakage channels.

Preferred Qualifications:

• Experience in e-commerce and retail related fields.
• Experience in data platform related product development or big data technologies, such as Hadoop, ClickHouse, etc.