Security Engineer (Penetration Tester) - Security Assurance

5 Months ago • All levels • Cyber Security

Job Summary

Job Description

ByteDance's Security Assurance team seeks a talented Security Engineer (Penetration Tester) to strengthen their security posture. Responsibilities include designing and conducting penetration testing, identifying vulnerabilities, certifying systems, and collaborating with product teams to improve security practices. The ideal candidate will have a strong background in web application security, mobile app security, cloud security, and relevant programming languages. This role involves identifying and resolving security issues, conducting security reviews, and providing security engineering support.
Must have:
  • Background in Computer Science/Engineering or Information Systems
  • Strong knowledge in web application security, mobile app security, cloud security, and thick client security
  • Solid experience in coding with JavaScript (Node JS), Go, Python, Java, C++, or Rust
  • Good project management skills and teamwork
Good to have:
  • CTF player experience
  • CVEs (excluding vulnerabilities like XSS, CSRF in random CMS)
  • BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.

Job Details

Responsibilities
About ByteDance Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content. Why Join Us Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve. Join us. About the Security Assurance Team at ByteDance The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference. Responsibilities - Continuously design and conduct penetration testing to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards in the staging/production environment. - Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks. - Certify infrastructure components, systems and applications that meet security standards. - To identify risks and actively take ownership to resolve any potential project issues. - Conduct technical security reviews for any new products and feature requirements. - Provide security engineering support to product teams to help identify potential security flaws in the early stages of SDLC. - Collaborate closely with other parts of the security team and product teams to design defense-in-depth controls that limit attackers' ability and improve our security postures. - Continuously conduct security research and strive to innovate.
Qualifications
- Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines. - Strong knowledge in some of these various disciplines: web application security, mobile app security, cloud security and thick client security. - Solid experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust. - Good project management skills and focused teamwork. Preferred Requirements - CTF players, live competitions and hacking events experience. - CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred. - BugBounty experience with reputable statistics in HackerOne, BugCrowd etc. ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Similar Jobs

Armada - Senior Software Engineer

Armada

Thiruvananthapuram, Kerala, India (On-Site)
6 Months ago
Next Level Business Services - Java Developer with Oracle SOA

Next Level Business Services

Cincinnati, Ohio, United States (On-Site)
6 Months ago
Onward Search - Software Engineer

Onward Search

Rochester, Minnesota, United States (Remote)
1 Week ago
ByteDance - Site Reliability Engineer, SealSuite

ByteDance

Singapore (On-Site)
1 Week ago
Google - ASIC Architect, Silicon

Google

Mountain View, California, United States (On-Site)
4 Days ago
PwC - Senior Associate - Risk & Regulations | Advisory [US Client]

PwC

Buenos Aires, Buenos Aires, Argentina (On-Site)
5 Months ago
ION - Cyber Security Analyst, Italy

ION

Pisa, Tuscany, Italy (On-Site)
6 Months ago
PwC - Consultant Expérimenté / Manager Cybersécurité | CDI | H/F

PwC

Toulouse, Occitanie, France (On-Site)
6 Months ago
Saviynt - Sr. Principal Software Engineer - Privileged Access Management (PAM)

Saviynt

El Segundo, California, United States (Hybrid)
6 Months ago
ION - Senior Security Architect

ION

London, England, United Kingdom (On-Site)
6 Months ago

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

Salesforce - Software Engineer MTS

Salesforce

San Francisco, California, United States (Remote)
2 Weeks ago
Playrix - Senior Engineering Manager

Playrix

Almaty, Almaty Region, Kazakhstan (Remote)
6 Months ago
Attentive - Senior Software Engineer

Attentive

New York, New York, United States (Hybrid)
6 Months ago
DigitalOcean - Senior Software Engineer (Hyderabad)

DigitalOcean

Hyderabad, Telangana, India (Hybrid)
5 Months ago
Google - Software Engineer II, Applied AI

Google

Kraków, Lesser Poland Voivodeship, Poland (On-Site)
1 Week ago
The Walt Disney Company - Senior Software Engineer - Scala

The Walt Disney Company

New York, New York, United States (On-Site)
1 Week ago
Twitch - Data Engineer - Monetization

Twitch

San Francisco, California, United States (On-Site)
1 Week ago
Microsoft - Technical Advisor, Microsoft AI

Microsoft

Mountain View, California, United States (Hybrid)
1 Week ago
Google - Senior Software Engineer, Full Stack, VM Manager

Google

Warsaw, Masovian Voivodeship, Poland (On-Site)
1 Week ago
Microsoft - Applied Scientist: Microsoft AI – PhD – Redmond

Microsoft

Redmond, Washington, United States (On-Site)
1 Week ago

Get notifed when new similar jobs are uploaded

Jobs in Singapore

Kaedim - Software Engineer

Kaedim

Singapore (On-Site)
8 Months ago
Tencent - Senior AI Product Manager

Tencent

Singapore (On-Site)
5 Months ago
ByteDance - LLM Coding Trainer - Specialist

ByteDance

Singapore (On-Site)
5 Months ago
Ubisoft - UI/UX Director

Ubisoft

Singapore, Singapore (On-Site)
1 Month ago
IGG - Senior Game Designer

IGG

Singapore (On-Site)
6 Months ago
IGG - Producer

IGG

Singapore (On-Site)
6 Months ago
Riot Games - Insights Analyst III

Riot Games

Singapore (On-Site)
7 Months ago
Google - New Business Account Strategist

Google

Singapore (On-Site)
1 Week ago
ByteDance - Product Lead

ByteDance

Singapore (On-Site)
6 Months ago

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

Microsoft - Senior Software Engineer

Microsoft

Redmond, Washington, United States (On-Site)
3 Days ago
Google - Senior Security Engineer, AI Systems Security

Google

San Francisco, California, United States (On-Site)
1 Week ago
Google - Senior Cyber Security Advisor

Google

New York, New York, United States (On-Site)
6 Days ago
Zinnia - Senior Cloud Security Engineer

Zinnia

Noida, Uttar Pradesh, India (Hybrid)
6 Months ago
PwC - Information Protection Senior Manager

PwC

Amsterdam, North Holland, Netherlands (Hybrid)
4 Months ago
ByteDance - Software Engineer Intern, Authorization

ByteDance

Singapore (On-Site)
4 Weeks ago
ION - Junior Cyber Security Analyst

ION

Pisa, Tuscany, Italy (Hybrid)
6 Months ago
ByteDance - Backend Engineer(Distributed System) - Network Security - San Jose

ByteDance

San Jose, California, United States (On-Site)
5 Months ago
Google - Tech Lead, Administrative Access

Google

New York, New York, United States (On-Site)
1 Week ago
PwC - Manager - System and Process Assurance

PwC

Colombo, Western Province, Sri Lanka (On-Site)
6 Months ago

Get notifed when new similar jobs are uploaded

About The Company

Where imagination meets innovation, delivering limitless gaming experiences.

Dublin, County Dublin, Ireland (On-Site)

London, England, United Kingdom (On-Site)

Bangkok, Bangkok, Thailand (On-Site)

San Jose, California, United States (On-Site)

State Of São Paulo, Brazil (On-Site)

San Jose, California, United States (On-Site)

View All Jobs

Get notified when new jobs are added by ByteDance

Level Up Your Career in Game Development!

Transform Your Passion into Profession with Our Comprehensive Courses for Aspiring Game Developers.

Job Common Plug