Product Security Engineer Graduate (Security BP) - 2027 Start

Our team provides information security support across ByteDance's various business lines. By working closely with each business team, we design and implement tailored security strategies based on their specific operational and business needs. Leveraging the expertise of the security organization, we deliver security solutions that are closely aligned with business objectives while remaining cost-effective and scalable, enabling teams to access the most efficient and reliable security services and tools.

We are looking for talented individuals to join our team. As a graduate, you will get opportunities to pursue bold ideas, tackle complex challenges, and unlock limitless growth. Successful candidates must be able to commit to an onboarding date by the end of the year. Please state your availability and graduation date clearly in your resume. Candidates can apply to a maximum of two positions and will be considered for jobs in the order you apply. The application limit is applicable to our Company and its affiliates' jobs globally. Applications will be reviewed on a rolling basis - we encourage you to apply early.

Online Assessment Candidates who pass resume screening will be invited to participate in Our Company's technical online assessment.

Responsibilities

• Ensure that our applications are designed and implemented to the highest security and privacy standards, thus maintaining and enhancing user trust.
• Review and analyze design, architectures, existing systems services, operating systems, networks and applications from a security perspective, via black box testing, code reviews, automation, threat modeling and research.
• Discover security issues that appear under new threat scenarios, support incident response, forensics, remediation in a cross-functional environment driving towards incident resolution.
• Leverage AI and LLM capabilities to build, improve, and innovate solutions to address security issues at scale.Minimum Qualification(s)
• Individuals who are completing or have recently completed a Bachelor's/ Master's degree in Computer Science, Computer Engineering, Electrical Engineering or a related discipline.
• Security engineering experience such as design review, threat modeling, security mitigation development, security tooling development or privacy engineering.
• Solid knowledge and understanding in various disciplines: web application security, mobile app security, network security, operating system internals and hardening, applied cryptography, cloud computing. You're expected to be an expert in at least one of these areas.
• Experience in writing and reviewing code in at least one of the following programming languages: JavaScript (Node JS), Go, Python, Java, C++, Rust.
• Strong problem-solving skills and excellent debugging / troubleshooting skills.

Preferred Qualification(s)

• CTF, Bug-Bounty, or Live Hacking Event experience
• Security public recognition through Vulnerability Disclosure Programs
• Published security research, open source tooling, CVEs, presentations/talks at top security conferences.