Product Security Engineer Graduate (Security BP)

About the Role

Our team provides information security support across ByteDance’s various business lines. By working closely with each business team, we design and implement tailored security strategies based on their specific operational and business needs. Leveraging the expertise of the security organization, we deliver security solutions that are closely aligned with business objectives while remaining cost-effective and scalable, enabling teams to access the most efficient and reliable security services and tools. As a graduate, you will get opportunities to pursue bold ideas, tackle complex challenges, and unlock limitless growth. Successful candidates must be able to commit to an onboarding date by the end of the year.

Key Responsibilities

• Ensure that applications are designed and implemented to the highest security and privacy standards, maintaining and enhancing user trust.
• Review and analyze design, architectures, existing systems services, operating systems, networks, and applications from a security perspective, via black box testing, code reviews, automation, threat modeling, and research.
• Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross-functional environment driving towards incident resolution.
• Leverage AI and LLM capabilities to build, improve, and innovate solutions to address security issues at scale.

Requirements & Tech Stack

• Minimum Qualification(s):
• Individuals completing or recently completed a Bachelor's/Master's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related discipline.
• Security engineering experience such as design review, threat modeling, security mitigation development, security tooling development, or privacy engineering.
• Solid knowledge and understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing. You're expected to be an expert in at least one of these areas.
• Experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.
• Strong problem-solving skills and excellent debugging / troubleshooting skills.
• Preferred Qualification(s):
• CTF, Bug-Bounty, or Live Hacking Event experience.
• Security public recognition through Vulnerability Disclosure Programs.
• Published security research, open source tooling, CVEs, presentations/talks at top security conferences.

Job Information

• Compensation Description (Annually): Base salary range of $87,400 - $162,000. Compensation may vary based on qualifications, skills, competencies, experience, and location.
• Potential for additional discretionary bonuses/incentives and restricted stock units.
• Benefits may vary by employment nature and country.
• Day one access to medical, dental, and vision insurance, 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others.
• 10 paid holidays, 10 paid sick days, and 17 days of Paid Personal Time (prorated upon hire).

About Us

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of products like TikTok, Lemon8, CapCut, Pico, Toutiao, Douyin, and Xigua, ByteDance makes it easier and more fun for people to connect with, consume, and create content.

Why Join ByteDance

• Inspiring creativity is at the core of ByteDance's mission.
• Innovative products are built to help people authentically express themselves, discover, and connect.
• Global, diverse teams make this possible.
• Strive to do great things with great people, leading with curiosity, humility, and a desire to make an impact.
• Foster an "Always Day 1" mindset for meaningful breakthroughs.

Diversity & Inclusion

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people globally, and so does our workplace. We are committed to celebrating diverse voices and creating an environment that reflects the many communities we reach.