Software Engineer (Security) - Global Payment - Singapore

About ByteDance ByteDance will be prioritizing applicants who have a current right to work in Singapore, and do not require ByteDance sponsorship of a visa. Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content. Why Join Us Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always. At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve. Join us. About Global Payment The Global Payment team of Bytedance provides payment solutions - including payment acquisitions, disbursements, transaction monitoring, payment method management, foreign exchange conversion, accounting, reconciliations, and so on to ensure that our users have a smooth and secure payment experience on ByteDance platforms including TikTok. We are seeking a highly skilled and experienced Security Engineer to join our team. As a Security Engineer, you will play a crucial role in ensuring the security and integrity of our payment systems, protecting sensitive information, and mitigating potential risks. You will collaborate with cross-functional teams to implement and enhance security measures, keeping our organization at the forefront of cybersecurity. The detailed responsibility include: - Security Architecture: Design, implement, and maintain robust security architectures for payment systems, ensuring compliance with industry standards and regulations. - Propose, plan, and execute Red Team Operators based on realistic threats to the organization. - Conducts security exercises that emulate real-world threats, TTPs that are most relevant to our organization. - Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations. - Collaborate across multiple defense/product teams to propose enhancements and improve current security offerings. - Security Testing: Perform regular security assessments, penetration testing, and code reviews to identify and address security vulnerabilities in payment systems.

Minimum Qualifications: - Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines. - Strong knowledge of some of these various disciplines: red team operations, infrastructure security, MITRE, TTPs. - An adversarial mindset to emulate a real-world attacker. - Excellent and professional communication skills with an ability to articulate complex topics in a clear and concise manner. Preferred Qualifications: - Security Engineering for a financial institution or department. - CTF players, live competitions and hacking events experience. - CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred. - BugBounty experience with reputable statistics in HackerOne, BugCrowd etc. ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.