Red Team Engineer, Security Assurance

About the Team

The Security Assurance Team is dedicated to advancing both offensive and defensive security technologies and methodologies to enhance the company's core security frameworks, data protection, and business security posture. Our focus is on mitigating the risks associated with zero-day vulnerabilities and security incidents. We offer comprehensive security services including software development lifecycle (SDLC) security, vulnerability management, identifying critical high-risk issues, supply chain security, network defense, red teaming exercises, underground market surveillance, threat detection, emergency responses, threat intelligence, and detailed security investigations.

Job Responsibilities

• Design, plan, and carry out Red Team assessments to test if infrastructure, systems, and applications comply with confidentiality, integrity, authentication, availability, authorization, and non-repudiation security principles based on realistic threat scenarios.
• Develop a comprehensive understanding of ByteDance’s enterprise products, their functionalities, and potential security risks or abuse avenues.
• Perform simulated attacks and security evaluations reflecting actual threat actor tactics, techniques, and procedures (TTPs) relevant to the organization.
• Convert security requirements into comprehensive testing plans; develop and execute test scripts or code that adhere to established standards to uncover vulnerabilities.
• Validate that infrastructure elements, systems, and applications meet established security criteria.
• Prepare detailed documentation of red team engagements outlining objectives, findings, critical insights, and improvement recommendations.
• Collaborate extensively with defense and product teams to suggest security enhancements and evolve current protection mechanisms.

Qualifications

Minimum Requirements:

• Educational background in Computer Science, Computer Engineering, Information Systems, or related STEM fields.
• Expertise in areas such as red team operations, infrastructure security, MITRE framework, and TTPs.
• Ability to think like an adversary to realistically simulate attacker behavior.
• Strong written and verbal communication skills, capable of explaining complex security concepts effectively and clearly.

Preferred Qualifications:

• Professional experience in Red Team roles within enterprise environments.
• Participation in Capture The Flag (CTF) competitions, live hacking events, or similar challenges.
• Documented contributions to Common Vulnerabilities and Exposures (CVEs) beyond common web vulnerabilities like XSS or CSRF in arbitrary CMS platforms.
• Track record in bug bounty programs with recognized achievements on platforms such as HackerOne or BugCrowd.

About ByteDance

Established in 2012, ByteDance’s mission is to inspire creativity and enrich life. It offers a portfolio of over a dozen products including TikTok, Lemon8, CapCut, and Pico, alongside China-specific platforms like Toutiao, Douyin, and Xigua. ByteDance's technologies facilitate engaging, entertaining, and creative connections amongst users worldwide.

Why Join ByteDance

ByteDance centralizes creativity as its mission core, empowering users to express, discover, and connect meaningfully. The company’s global and diverse workforce supports innovation and impact in a rapidly evolving technological landscape. ByteDance champions a culture of curiosity, humility, and continual learning, embodying an "Always Day 1" mindset. This culture fosters breakthrough achievements benefiting individuals, the company, and its user base.

Diversity & Inclusion

ByteDance is dedicated to fostering an inclusive environment where all employees' skills, perspectives, and experiences are respected and celebrated. Reflecting the global community it serves, ByteDance strives to cultivate a workplace embracing diverse voices to inspire creativity and enrich life worldwide.