Senior Security Software Architect, Security Engineering

Responsibilities

About the Company
Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

Why Join Us
Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible.
Together, we inspire creativity and enrich life - a mission we aim towards achieving every day.
To us, every challenge, no matter how ambiguous, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.
At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve.
Join us.

About the Security Engineering Team
The security engineering team is missioned to build security services, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. You also have opportunities to go through the whole lifecycle of security products or services, are encouraged to participate in each phase, each part of the projects and have the whole picture of what we are working on.

Responsibilities
- Take a key role in designing and overseeing the development of secure software systems.
- Take the initiative to discover and define security problems, as well as engineering problems, from a security perspective in ByteDance infrastructure; identify the security gaps between existing systems and security goals.
- Develop and maintain the overall security architecture for multiple software applications, including but not limited to authentication, authorization, applied cryptography data security, network security, etc.
- Review the existing security systems and oversee the integration of these systems with the company's infrastructure; improve or refactor the security systems from the perspective of performance, maintainability, usability, resilience, robustness, and full lifecycle cost.
- Collaborate with the security software development team, providing technical guidance, to ensure that security and engineering improvement requirements are translated into technical specifications and implemented correctly in the codebase.

Qualifications

Minimum Qualifications
- Bachelor's degree or higher in Computer Science, Information Security, or a related field. A master's degree is preferred.
- Solid experience in software architecture and design, with a focus on security
- Comprehensive and in-depth knowledge of the security domain, covering areas such as network security, software security, application security, data security, and security attack and defense.
- Solid background in system and security technologies, including operating systems, distributed systems, cryptographic technology, authentication, and access control, etc.
- Profound infrastructure and security architecture design capabilities; capable of integrating security requirements into system design based on business context and technical requirements with great maintainability and usability.
- Understand the security architecture of cloud computing; be familiar with security solutions in public cloud, private cloud, and hybrid cloud environments with a solid background in distributed architecture, microservice architecture, storage system load balancing, fault-tolerance mechanism, etc.
- Proven track record of successfully designing and implementing secure software systems in complex and large scale enterprise environments, including security system development, security assessment, and security rectification/remediation
- Exhibiting outstanding cross-team communication skills, capable of clearly expressing security requirements and solutions, and promoting the implementation of security measures.

Preferred Qualifications
- A Master or PhD degree in computer science, information security, or a related field is preferred
- An international degree or international working experience
- Experience of software R&D and SRE in large internet companies

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.