Responsibilities
The GMPT Security BP Team provides application security, cloud security, data security, account security, large model security, and business security services to the Bytedance Global Monetization (Global Advertising) Team, including threat intelligence analysis, penetration testing, red-teaming, tool R&D, and risk governance. Responsibilities - Oversee data security governance and solution implementation for business lines, and continuously enhance security maturity through internal/external threat analysis, risk assessment and mitigation, and internal permission governance. - Handle data security incidents, and continuously improve detection and response capabilities through monitoring, incident response, forensics analysis, and post-incident reviews. - Integrate security principles into the security design of business systems to prevent new security risks introduced by business practices and new technologies. - Continuously monitor industry trends and emerging technical risks related to data security and new technology architectures such as AI.
Qualifications
Minimum Qualifications - Bachelor's degree or above in Computer Science, Information Technology, Cybersecurity or related disciplines. - Familiar with the data security lifecycle, and understand common data security risks and key tasks in each phase. - 3+ years of relevant working experience in data security, with expertise in data security incident monitoring and response. - Familiar with data security products, including DLP, UEBA, sensitive data identification, data encryption/decryption, and data sharing with hands-on experience in data security product deployment and operation. - Proficiency in at least one programming language such as Python, Java, Go, Bash, C/C++, Shell, with strong self-learning and problem-solving skills. - Excellent teamwork skills with strong proactivity and sense of responsibility. Preferred Qualifications - Familiar with enterprise big data security scenarios such as Hadoop, HDFS, ElasticSearch practical experience in cybersecurity data mining, data analysis or threat intelligence analysis is a plus. - Broad knowledge across cybersecurity domains, with continuous learning of industry-leading products and practices. - Experience in cross-timezone collaboration.
