Security Tech Lead, Global E-Commerce Security Platform

Responsibilities

About the team:
Global E-commerce is a content E-commerce business with international short video product as the carrier. It is committed to becoming the first choice for users to discover and purchase good products with affordable prices. Global E-commerce business team hopes to provide users with more tailored and efficient consumption experience, enabling merchants to receive reliable platform services in different scenarios such as live E-commerce, short video content E-commerce, so as to make more affordable and high-quality products sell easily and a better life within reach.

The Security Platform team is responsible for safeguarding the platform's security and creating a safe, trustworthy shopping and business environment for Global E-commerce: allowing consumers to shop with confidence, sellers to operate with peace of mind, and influencers to focus on the enjoyment of bringing goods.

In order to enhance collaboration and cross-functional partnerships, among other things, at this time, our organization follows a work schedule that requires employees to work in the office 5 days a week, or as directed by their manager/department. We regularly review our work model, and the specific requirements may change at any time.

Responsibilities:
- Responsible for building the overall data security defense line for the Global E-commerce platform, designing comprehensive prevention and control plans for user-sensitive information and commercial data.
- Monitor and analyze emerging cyber threats, vulnerabilities, and exploits related to our infrastructure and products.
- Research new methods and technologies for detecting cyber threats, identifying signals, and developing data-driven approaches that utilize these signals to detect security threats and breaches.
- Conduct Data Leakage Prevention and internal data management through multiple channels such as platform, ecosystem, and office, ensuring minimal data usage and proper disclosure to protect the privacy and confidentiality of consumers, merchants, and the platform.
- Work with the big data stack, designing and developing highly scalable systems for full data lifecycle protection, including but not limited to data classification, access control, encryption, masking, auditing, and alerting.
- Design a sensitive data prevention and control solution for the Global E-commerce full-link platform, successfully implementing the overall solution through cross-team collaboration to ensure that the risk of data being crawled and stolen is controllable.
- Based on the data usage scenarios of downstream partners and ecological ISVs, design data disclosure and reasonable usage plans, standardizing appropriate data usage by third-party partners to ensure downstream sensitive data is not misused or stolen.
- Develop an overall reasonable usage plan for Global E-commerce data within office and production environments, ensuring that key business data and personal privacy data are not misused or stolen through proper data lifecycle management.

Qualifications

Minimum Qualifications:
- A bachelor’s degree in computer science, engineering, or a related field.
- 5+ years of related experience in data security.
- Familiar with computer network principles, understanding of HTTP principles and operating mechanisms, and capable of HTTP log auditing and analysis.
- Data analysis capabilities: Have big data analysis and development capabilities in the Hive environment, and be able to discover threats and risks based on data analysis.
- Security attack and defense capabilities: Familiar with the principles and utilization methods of security vulnerabilities that can lead to data leakage (server/client), and have relevant vulnerability repair and solution reinforcement capabilities.
- Experience in the construction of data security prevention and control links.
- Practical experience and capabilities in the best practices and solution construction processes for preventing various data leakage channels.

Preferred Qualifications:
- Experience in e-commerce and retail related fields.
- Experience in data platform related product development or big data technologies, such as Hadoop, ClickHouse, etc.

Job Information

【For Pay Transparency】Compensation Description (Annually)

The base salary range for this position in the selected city is $224000 - $560000 annually.​

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.​

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).​

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.​

For Los Angeles County (unincorporated) Candidates:​

Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Our company believes that criminal history may have a direct, adverse and negative relationship on the following job duties, potentially resulting in the withdrawal of the conditional offer of employment:​

1. Interacting and occasionally having unsupervised contact with internal/external clients and/or colleagues;​

2. Appropriately handling and managing confidential information including proprietary and trade secret information and access to information technology systems; and​

3. Exercising sound judgment.​

About Us

Founded in 2012, ByteDance's mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Lemon8, CapCut and Pico as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.​

Why Join ByteDance

Inspiring creativity is at the core of ByteDance's mission. Our innovative products are built to help people authentically express themselves, discover and connect – and our global, diverse teams make that possible. Together, we create value for our communities, inspire creativity and enrich life - a mission we work towards every day.​

As ByteDancers, we strive to do great things with great people. We lead with curiosity, humility, and a desire to make impact in a rapidly growing tech company. By constantly iterating and fostering an "Always Day 1" mindset, we achieve meaningful breakthroughs for ourselves, our Company, and our users. When we create and grow together, the possibilities are limitless. Join us.​

Diversity & Inclusion​

ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.​

Reasonable Accommodation

ByteDance is committed to providing reasonable accommodations in our recruitment processes for candidates with disabilities, pregnancy, sincerely held religious beliefs or other reasons protected by applicable laws. If you need assistance or a reasonable accommodation, please reach out to us at https://tinyurl.com/RA-request​