Red Team Operator (Enterprise Office Security)

at  BYTEDANCE PTE LTD

ABOUT THE COMPANY

Founded in 2012, ByteDance’s mission is to inspire creativity and enrich life. With a suite of more than a dozen products, including TikTok, Helo, and Resso, as well as platforms specific to the China market, including Toutiao, Douyin, and Xigua, ByteDance has made it easier and more fun for people to connect with, consume, and create content.

QUALIFICATIONS

• Background in Computer Science, Computer Engineering, Information Systems or other STEM disciplines.
• Strong knowledge in some of these various disciplines: red team operations, infrastructure security, MITRE, TTPs.
• An adversarial mindset to emulate a real-world attacker.
• Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner.

PREFERRED REQUIREMENTS

• Red Team Experience in an enterprise environment.
• CTF players, live competitions and hacking events experience.
• CVEs (excluding vulnerabilities such as XSS, CSRF in random CMS) are preferred.
• BugBounty experience with reputable statistics in HackerOne, BugCrowd etc.
  ByteDance is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At ByteDance, our mission is to inspire creativity and enrich life. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too

• Propose, plan, and execute Red Team Operations to determine if infrastructure components, systems and applications meet confidentiality, integrity, authentication, availability, authorisation, and nonrepudiation standards based on realistic threats to the organization.
• Maintain a deep understanding of ByteDance Enterprise Products, how they work, and how they could be attacked or abused.
• Conducts security exercises that emulate real-world threats, TTPs that are most relevant to our organization.
• Translate requirements into test plan, write and execute test scripts or codes in line with standards and procedures to determine vulnerability to attacks.
• Certify infrastructure components, systems and applications that meet security standards.
• Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations.
• Collaborate across multiple defense/product teams to propose enhancements and improve current security offerings.