Cloud Security Engineer

About the Team The Team is researching offensive and defensive technology and skills to continuously improve the company's fundamental security, data security, and business security levels. We strive to minimize the impact of 0-day vulnerabilities and incidents. Our team provides a range of security services, including SDLC, vulnerability management, extreme critical risks discovery, supply chain security, network defense, red teaming, underground market crackdown, threat detection, emergency response, threat intelligence, and information security investigation. Job Responsibilities: 1. Responsible for the security construction of ByteDance's overseas cloud products and infrastructure. 2. Continuously mitigate operational, configuration, and exposure risks for overseas cloud products and infrastructure, systematically enhancing the security level of business lines. 3. Research about cutting-edge security fields and new attack and defense technologies to enhance the team's leading security technology in the industry Minimum Qualification(s): 1. Familiarity with common risks, including their principles, attack and defense strategies, and systematic governance and construction approaches. 2. Proficiency in at least one of the following programming languages: Golang, Python, Java, or NodeJS, with the ability to conduct code review and development. 3. In-depth knowledge of security technologies in one or more of the following fields: AI security, devsecops, big data, networking, virtualization, zero trust. 4. A good sense of professional ethics, good interest, and a desire for long-term development in this field. Preferred Qualification(s): 1. Candidates who have reported high-impact vulnerabilities or won famous security competitions (CTF&AWD&Exercise) are preferred. 2. Candidates who have good practical results in security of AI or the application of AI in the security field are preferred.