Red Team Engineer Graduate (Security Assurance) - 2027 Start

Team Introduction
The team is missioned to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. In this team, you'll have a unique opportunity to have first-hand exposure to the strategy of the company in key security initiatives, especially in building scalable and secure-by-design systems and solutions. Our challenges are not your regular day-to-day technical problems; you'll be part of a team that's developing new solutions to new challenges of a kind not previously addressed by big tech. It's working fast, at scale, and we're making a difference.

We are looking for talented individuals to join our team. As a graduate, you will get opportunities to pursue bold ideas, tackle complex challenges, and unlock limitless growth.

Successful candidates must be able to commit to an onboarding date by the end of the year. Please state your availability and graduation date clearly in your resume.

Candidates can apply to a maximum of two positions and will be considered for jobs in the order you apply. The application limit is applicable to our Company and its affiliates' jobs globally. Applications will be reviewed on a rolling basis - we encourage you to apply early.

Responsibilities:

• Propose, plan, and execute Red Team Operations to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorization, and non-repudiation standards based on realistic threats to the organization.
• Maintain a deep understanding of Byte Dance Enterprise Products, how they work, and how they could be attacked or abused.
• Conducts security exercises that emulate real-world threats, TTPs that are most relevant to our organization.
• Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.
• Certify infrastructure components, systems and applications that meet security standards.
• Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations.
• Collaborate across multiple defense/product teams to propose enhancements and improve current security offerings.

Requirements:

• Minimum Qualifications

• Individuals who are completing or have recently completed a Bachelor's/ Master's degree in Computer Science, Computer Engineering, Information Systems or a related discipline.

• Strong knowledge in some of these various disciplines: red team operations, infrastructure security, MITRE, TTPs.

• An adversarial mindset to emulate a real-world attacker.

• Excellent and professional communication skills with an ability to articulate complex topics in a clear and concise manner.

• Preferred Qualifications

• Red Team Experience in an enterprise environment.

• CTF players, live competitions and hacking events experience.

• CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.

• Bug Bounty experience with reputable statistics in Hacker One, Bug Crowd etc.