- Singapore
Kerja Sepenuh Masa, Application Security Engineer - GEC - Singapore di ByteDance - Maukerja
Kongsi
Simpan
Lokasi Kerja
Penerangan Kerja
Tanggungjawab
Responsibilities
We are the Global e-Commerce Security BP team. We partner closely with product, engineering and operations to safeguard Global e-Commerce across regions. Our scope covers application security, data security and architecture security. We build and operate the SDL/DevSecOps security program, conduct threat modeling, code reviews, penetration testing, red/blue exercises and vulnerability management, respond to security incidents rapidly and drive systemic fixes. We value pragmatism, ownership and cross-team collaboration, protecting business growth and user trust at global scale.
Responsibilities:
- Conduct vulnerability discovery and risk management for Global e-Commerce business-related applications and APP products, and provide security assurance and support for key projects.
- Participate in the construction and optimization of the SDL security system and processes, proactively mitigate potential security risks during the design and development phase, and systematically address security risks from the architectural level.
- Responsible for building security-related capabilities and processes, including security assessment, code auditing, penetration testing, vulnerability discovery, and attack and defense drills, and working closely with the product development team to improve the business's security level.
- Track domestic and international security trends and vulnerabilities, respond quickly to security incidents, propose solutions and technical analysis, and coordinate with multiple departments to handle them.
Qualifications
Minimum Qualifications
- Solid understanding of common Web/App/System vulnerabilities and remediation.
- Strong white-box auditing skills; able to review Python/Go/Node.js/Java; capable of automating repetitive tasks.
- Experience participating in SL/DevSecOps security practices (policies, controls, scanning tools) and collaborating with product and engineering teams.
- Fast learning and analytical problem-solving skills; keeps up with the latest security trends.
- Excellent communication, collaboration and professional ethics.
Preferred Qualifications
- Experience building or optimizing SL/DevSecOps security programs at scale.
- Deep expertise in one or more areas: application security, data security, privacy compliance, architecture security.
- Experience with red/blue exercises, incident response and cross-regional security operations.
About Us
Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Lemon8, CapCut and Pico as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.
Why Join ByteDance
Inspiring creativity is at the core of ByteDance's mission. Our innovative products are built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and enrich life - a mission we work towards every day.
As ByteDancers, we strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our Company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
We are the Global e-Commerce Security BP team. We partner closely with product, engineering and operations to safeguard Global e-Commerce across regions. Our scope covers application security, data security and architecture security. We build and operate the SDL/DevSecOps security program, conduct threat modeling, code reviews, penetration testing, red/blue exercises and vulnerability management, respond to security incidents rapidly and drive systemic fixes. We value pragmatism, ownership and cross-team collaboration, protecting business growth and user trust at global scale.
Responsibilities:
- Conduct vulnerability discovery and risk management for Global e-Commerce business-related applications and APP products, and provide security assurance and support for key projects.
- Participate in the construction and optimization of the SDL security system and processes, proactively mitigate potential security risks during the design and development phase, and systematically address security risks from the architectural level.
- Responsible for building security-related capabilities and processes, including security assessment, code auditing, penetration testing, vulnerability discovery, and attack and defense drills, and working closely with the product development team to improve the business's security level.
- Track domestic and international security trends and vulnerabilities, respond quickly to security incidents, propose solutions and technical analysis, and coordinate with multiple departments to handle them.
Qualifications
Minimum Qualifications
- Solid understanding of common Web/App/System vulnerabilities and remediation.
- Strong white-box auditing skills; able to review Python/Go/Node.js/Java; capable of automating repetitive tasks.
- Experience participating in SL/DevSecOps security practices (policies, controls, scanning tools) and collaborating with product and engineering teams.
- Fast learning and analytical problem-solving skills; keeps up with the latest security trends.
- Excellent communication, collaboration and professional ethics.
Preferred Qualifications
- Experience building or optimizing SL/DevSecOps security programs at scale.
- Deep expertise in one or more areas: application security, data security, privacy compliance, architecture security.
- Experience with red/blue exercises, incident response and cross-regional security operations.
About Us
Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Lemon8, CapCut and Pico as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.
Why Join ByteDance
Inspiring creativity is at the core of ByteDance's mission. Our innovative products are built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and enrich life - a mission we work towards every day.
As ByteDancers, we strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our Company, and our users. When we create and grow together, the possibilities are limitless. Join us.
Diversity & Inclusion
ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.
Peringatan Penting
Jangan pernah kongsikan maklumat bank atau kad kredit anda semasa memohon pekerjaan. Elakkan membuat sebarang pembayaran atau mengisi survey yang tidak berkaitan. Jika ada yang mencurigakan, sila laporkan iklan pekerjaan ini segera.
Lebih Lanjut