Application Security Engineer - Global Monetization - Singapore
ByteDance, Singapore
About the job
We are the Global Monetization Product and Technology Security BP team. We partner closely with product, engineering and operations to safeguard Global Monetization Product and Technology across regions. Our scope covers application security, data security, privacy compliance and architecture security. We build and operate the SDLC/DevSecOps security program, conduct threat modeling, code reviews, penetration testing, red/blue exercises and vulnerability management, respond to security incidents rapidly and drive systemic fixes. We value pragmatism, ownership and cross-team collaboration, protecting business growth and user trust at global scale.
- Conduct vulnerability discovery and risk management for Global Monetization Product and Technology business-related applications and mobile apps, and provide security assurance and support for key projects.
- Participate in building and improving the SDLC security system and processes, mitigate potential security risks during the design and development phase, and address security risks from the architectural level.
- Build security-related capabilities and processes, including security assessment, code auditing, penetration testing, vulnerability discovery and attack and defense drills, working closely with product development teams to improve business security.