Security Engineer (Penetration Tester) - 2025 Start

Responsibilities

About the Company
Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us
Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.
Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.
To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.
At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.
Join us.

About the Team
The Security Assurance Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation.

We are looking for talented individuals to join us in 2025. As a graduate, you will get unparalleled opportunities for you to kickstart your career, pursue bold ideas and explore limitless growth opportunities. Co-create a future driven by your inspiration with ByteDance.

Candidates can apply to a maximum of two positions and will be considered for jobs in the order you apply. The application limit is applicable to ByteDance and its affiliates' jobs globally. Applications will be reviewed on a rolling basis - we encourage you to apply early.

Responsibilities
- Responsible for conducting online security testing, routine security checks, penetration testing, and APP security testing.
- Systematically assess risks in business operations, design risk resolution solutions, and ensure their successful implementation.
- Participate in the development of foundational capabilities in the Software Development Life Cycle (SDLC), including process setup, metrics systems, and the ability to review automation requirements.

Qualifications

Minimum Qualifications
- Final year or recent graduate with a background in Software Development, Computer Science, Computer Engineering, or a related technical discipline.
- Strong knowledge of some of these various disciplines: web application security, cloud security and mobile app security.
- Solid experience in writing and reviewing code in at least one of the following programming languages: Go, JavaScript (Node JS),Python, Java etc .
- Familiar with web attack methods, capable of independently researching and discovering new vulnerabilities.

Preferred Qualifications
- CTF players, live competitions and hacking events experience.
- Has a strong interest in supporting the security of advertising and finance-related businesses
- Relevant research experience in payment security or the underground advertising market.

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

By submitting an application for this role, you accept and agree to our global applicant privacy policy, which may be accessed here: https://jobs.bytedance.com/en/legal/privacy.

If you have any questions, please reach out to us at apac-earlycareers@bytedance.com