jobapplier

Cloud Security Architect, Bytedance

ByteDance

Skills

Required

  • cloud computing
  • attack and defense strategies
  • cloud-native and infrastructure
  • network access
  • LLM
  • big data
  • storage
  • microservices
  • zero trust
  • container security technologies
  • Docker
  • Kubernetes
  • Golang / Python / Java / NodeJS

Preferred

  • discovering major impactful vulnerabilities
  • cloud computing platforms
  • AWS
  • Azure
  • Google Cloud
  • cloud security best practices
  • CISSP
  • CISM

About ByteDance

The Cybersecurity team owns security for all services offered by Volcano Engine & BytePlus which is a cloud service provider owned by ByteDance, including IaaS, PaaS and SaaS.

Responsibilities

  • Design, implement, and oversee cloud security architecture, encompassing physical hardware, operating system, cloud-native application, data security and privacy protection, insider threats and generative AI.
  • Develop and enforce cloud security policies, standards, and procedures in alignment with industry regulations and best practices.
  • Conduct security risk assessments, security training, and vulnerability assessments to identify and address security gaps proactively.
  • Collaborate with cross-functional teams to integrate security controls into cloud products and underlying infrastructure.
  • Stay abreast of emerging cloud security trends, technologies, and threats, providing guidance on security strategies and solutions.

Requirements

  • Familiar with the principles of common risks, attack and defense strategies; Understand how to systematically lead security architecture and risk governance.
  • Familiar with cloud-native and infrastructure technologies such as network access, LLM, big data, storage, cloud computing, microservices, zero trust, etc.
  • Familiarity with container security technologies (e.g., Docker, Kubernetes) and serverless security best practices.
  • Proficient in at least one language in Golang, Python, Java, or NodeJS, capable of doing code auditing/reviews and development.
  • Knowledge of security frameworks and standards (e.g., CIS Benchmarks, GDPR, HIPAA).
  • Strong communication and excellent teamwork skills. With professional working ethics, and have a keen risk awareness. Results orientated, aiming for long-term growth in this field.

Preferred

  • Experience of discovering major impactful vulnerabilities domestically or internationally / winning large-scale security competitions is a plus.
  • Priority given to those who have led or participated in large-scale governance, architecture, and design projects.
  • Strong understanding of cloud computing platforms (e.g., AWS, Azure, Google Cloud) and cloud security best practices.
  • Certifications: CISSP, CISM, OSCP, GIAC Certifications, etc.

Every job at ByteDance