ByteDance

Responsibilities

Team Introduction

The security engineering team is missioned to build security services, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. You also have opportunities to go through the whole lifecycle of security products or services, are encouraged to participate in each phase, each part of the projects and have the whole picture of what we are working on.

Responsibilities

• Take a key role in designing and overseeing the development of secure software systems.
• Take the initiative to discover and define security problems, as well as engineering problems, from a security perspective in ByteDance infrastructure; identify the security gaps between existing systems and security goals.
• Develop and maintain the overall security architecture for multiple software applications, including but not limited to authentication, authorization, applied cryptography data security, network security, etc.
• Review the existing security systems and oversee the integration of these systems with the company's infrastructure; improve or refactor the security systems from the perspective of performance, maintainability, usability, resilience, robustness, and full lifecycle cost.
• Collaborate with the security software development team, providing technical guidance, to ensure that security and engineering improvement requirements are translated into technical specifications and implemented correctly in the codebase.

Qualifications

Minimum Qualifications

• Bachelor's degree or higher in Computer Science, Information Security, or a related field.
• 5 years of experience in software architecture and design, with a focus on security
• Comprehensive and in-depth knowledge of the security domain, covering areas such as network security, software security, application security, data security, and security attack and defense.
• Solid background in system and security technologies, including operating systems, distributed systems, cryptographic technology, authentication, and access control, etc.
• Profound infrastructure and security architecture design capabilities; capable of integrating security requirements into system design based on business context and technical requirements with great maintainability and usability.
• Understand the security architecture of cloud computing; be familiar with security solutions in public cloud, private cloud, and hybrid cloud environments with a solid background in distributed architecture, microservice architecture, storage system load balancing, fault-tolerance mechanism, etc.
• Proven track record of successfully designing and implementing secure software systems in complex and large scale enterprise environments, including security system development, security assessment, and security rectification/remediation

Preferred Qualifications

• Exhibiting outstanding cross-team communication skills, capable of clearly expressing security requirements and solutions, and promoting the implementation of security measures.
• A Master or PhD degree in computer science, information security, or a related field is preferred.
• An international degree or international working experience.
• Experience of software R&D and SRE in large internet companies.