Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 81 days ago

桌面端Agent Sandbox研发工程师/专家 - 飞书

ByteDance19,268 open roles

Where
Shenzhen, Guangdong, Chinese Mainland
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen now桌面端Agent Sandbox研发工程师/专家 - 飞书ByteDance · Shenzhen, Guangdong, Chinese Mainland

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ByteDance's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.9% of postings close within 7 days. Measured by our own scanner across the market. ByteDance postings stay open a median of 9 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.9%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: posted 81 days ago

ByteDance median: 9 days open

The posting

团队介绍：飞书是字节跳动旗下 AI 工作平台，面向人与agent协作，提供一站式协同办公、组织管理、业务提效工具和深入企业场景的 AI 能力，让 AI 真能用真落地。 从互联网、高科技、消费零售到制造、金融、医疗健康，各行各业先进企业都在飞书落地AI，与飞书共创行业最佳实践。先进团队，AI用飞书。

1、负责Windows/Linux/macOS三端沙箱底层能力建设，为AI Agent提供安全的运行环境，覆盖进程管控、文件系统隔离、网络访问控制、权限收敛、资源限制、异常处理等模块； 2、负责沙箱接入层架构设计和实现，构建多端统一、标准、可扩展的执行接入层； 3、负责沙箱稳定性、性能、操作系统兼容性、安全策略体系建设，提升沙箱在复杂场景下的问题定位、异常处理等能力； 4、关注前沿技术趋势，具备较强的技术转化和工程落地能力，能够结合AI新兴方向，持续丰富产品能力、提升用户体验和安全效果。

1、本科及以上学历，计算机或相关专业，有二进制安全、系统底层从业背景者优先； 2、熟练掌握C/C++，静态库/动态库原理、内存管理、多线程与同步原语； 3、熟悉至少一类主流操作系统（Windows/Linux/macOS）的底层原理，理解进程/线程模型、虚拟内存与堆栈管理、文件系统、权限与安全模型、异常/信号处理、IPC机制等核心概念； 4、具备较强的问题定位及逆向分析能力，熟练使用对应平台的调试工具（Windbg、GDB/LLDB、dtrace/strace等），独立分析崩溃、内存泄漏、死锁等问题；熟练使用主流逆向工具（IDA Pro、Ghidra等）完成关键函数还原与系统底层实现分析； 5、良好的逻辑思维能力和技术好奇心，对系统底层技术、安全隔离技术有浓厚兴趣； 6、有安全产品、沙箱、虚拟化、终端管控、EDR、DLP、内核/驱动开发经验者优先，各端要求（任一方向皆可）： 1）Windows方向： （a）深入理解Windows NT架构及底层运行机制，熟悉PE文件结构、内存管理、对象管理、进程/线程管理、异常分发、调试机制等核心原理，了解Win32窗口与消息机制、COM/DCOM/RPC/ALPC等系统通信与组件模型。 （b）熟练掌握常规注入与反注入（如消息钩子、远程线程、APC、输入法、LSP/NSP等）方案与工程落地能力，掌握主流Hook技术的原理与应用。 （c）熟悉Windows网络编程与网络管控机制，了解LSP、NSP、WFP、NDIS、TDI等常用网络框架，能够实现基于进程、协议、IP、端口、域名等维度的网络访问控制、链接拦截、放行与审计能力。 （d）熟悉Windows权限与安全边界机制，包括Access Token、Integrity Level、UAC、Job Object、AppContainer、PP/PPL等，理解隔离边界与适用范围，具备权限收敛、进程约束与沙箱加固实践经验。 （e）熟悉Windows文件系统与设备访问控制机制，理解NTFS权限模型、Minifilter、对象命名空间及句柄访问控制原理，支撑文件读写审计、敏感路径隔离、设备访问限制等安全能力建设； 2）Linux方向： （a）具备扎实的Linux系统编程基础，熟悉进程与线程模型、IPC、文件I/O、内存管理等核心机制，能够熟练使用GDB、strace、perf、valgrind等工具开展问题定位与性能分析。 （b）熟悉Linux底层安全机制，包括Seccomp、Landlock、Capabilities、Namespace、Cgroups、eBPF等，理解其设计原理、适用边界及工程化落地方式。 （c）深入理解Linux系统调用原理、glibc实现与动态链接机制，具备系统级拦截、运行时管控或沙箱研发经验。 （d）熟悉容器Runtime、安全容器、云原生安全、终端安全产品等相关技术体系，理解其核心机制，并具备相关方向研发或落地经验。 （e）了解KVM/QEMU虚拟化、云沙箱、Serverless容器、轻量级虚拟机等技术原理，有相关系统设计、能力建设或工程实践； 3）macOS方向： （a）深入理解macOS系统架构和底层原理，熟悉XNU、BSD系统调用、进程/线程管理、内存管理、IPC、权限控制等核心机制。 （b）具备macOS API Hook或Runtime Instrumentation经验，熟悉C/C++层符号Hook、dyld、Mach-O、动态链接以及Objective-C Runtime、Method Swizzling、IMP替换、消息转发等底层机制。 （c）熟悉macOS安全与权限体系，包括TCC、SIP、Sandbox、Hardened Runtime、Entitlement、XPC等，具备相关能力设计与工程落地经验。 （d）熟悉Endpoint Security、Network Extension系统扩展框架，能够支撑终端安全、行为监控与访问控制等场景建设。 （e）具备良好的系统分析、问题定位和工程落地能力。

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ByteDance's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ByteDance's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ByteDance's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.