ByteDance

Responsibilities

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us

Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.

Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.

To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.

Join us.

Team Introduction

ByteDance's IT security team is responsible for enterprise IT global cyber security, server security, endpoint security, application security construction, and protection work. They work to improve overall IT security capabilities and security posture, providing security processes, security assessments, security operations, and security vulnerability management services. The team also supports IT teams and business departments in meeting their security requirements.

Responsibilities：

• Responsible for the design and implementation of IT security architectures and solutions, tracking the evolution of cutting-edge security technologies, and keeping update of the latest security threats and trends.
• Provide security solutions for business departments' requirements, keeping security solutions implementable and leading the implementation of these plans.
• Focuses on endpoint security and data security for office devices, serving as the principal technical expert in this area within the security department.
• Design and develop security architectures and solutions for endpoints (including PC and mobile devices) to enhance standardized management of enterprise endpoint security.
• Regularly assess and analyze vulnerabilities and risks in existing endpoint devices, design countermeasures to eliminate the risk of endpoints.
• Integrate endpoint data security protection solutions to prevent data leakage.
• Assist in building and implementing endpoint security policies, processes, and standards to ensure compliance with internal and external regulations and requirements.
• Collaborate with the security operations team to drive the design and development of automated security operations and maintenance solutions, supporting the optimization of endpoint and data security incident operations strategies.
• Provide technical support and training on security architectures and solutions to internal teams.

Qualifications

• At least 7 years of experience in the cyber security industry, with 5+ years in network security or zero-trust, and 3+ years in security architecture or solution experience.
• 3+ years of work experience in multinational corporations or large enterprises, Internet companies, with office network security design or operations experience.
• Practical experience in network security domain planning and management, and access control policy optimization.
• Extensive knowledge and practical experience in network security and zero-trust.
• Familiar with mainstream security standards and frameworks, such as NIST, ISO27001, Kill Chain, etc.
• Familiar with network security devices and tools, such as FW, IDS, NTA, VPN, Honey Pot, net traffic analysis, etc.
• Proficient in zero-trust-related technologies and mainstream products, such as SASE, ZTNA, SWG, CASB, SDWAN, etc.
• Excellent problem-solving and analytical skills, able to quickly identify risks and provide solutions.
• Exceptional communication, coordination, and project management skills, enabling effective collaboration with teams at all levels and XFN teams.
• Have cyber security certifications (e.g. CISSP, CCSP, CISM, etc.) is preferred.- At least 7 years of experience in cyber security industry, with 5+ years in endpoint security or data security, and 3+ years in security architecture or solution experience.
• 3+ years of work experience in multinational corporations or large enterprises, Internet companies, with experience in endpoint security or data security product design or operations.
• Possessing extensive knowledge and practical experience in endpoint security and data security.
• Familiar with endpoint security and data security standards and frameworks, such as NIST, ISO27001, PCI DSS, and data security lifecycle management.
• Familiar with office endpoint security and data security products and tools, such as AV, EDR, data encryption, DLP, security sandboxes, and patch management.
• Familiar with mobile terminal security products and tools, such as UEM, MDP, BYOD, and MDM, as well as management of Android and Apple devices.
• Excellent problem-solving and analytical skills, able to quickly identify risks and provide solutions.
• Exceptional communication and coordination skills, enabling effective collaboration with teams at all levels and XFN teams.
• Have cyber security certifications (e.g. CISSP, CCSP, CISM, etc.) is preferred.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

ByteDance Inc. is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at rd.accommodations@bytedance.com