Skip to content

Open nowPosted 8 hours agoWe saw it 33 min after it went up

AI安全蓝军 - 安全与风控

ByteDance19,170 open roles

Where
Beijing, Chinese Mainland
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowAI安全蓝军 - 安全与风控ByteDance · Beijing, Chinese Mainland
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ByteDance's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. ByteDance postings stay open a median of 5 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 8 hours ago

ByteDance median: 5 days open

The posting

团队介绍:我们团队致力于通过对攻防技术的持续研究,最大限度降低零日漏洞与安全事件造成的影响。我们提供红队演练、威胁检测、安全保障工具支持及事件调查等服务,助力提升系统韧性。通过不断强化攻防两端能力,我们在巩固公司核心安全基础、保障数据与业务安全方面发挥着关键作用。

1、以攻促防,构建以Agent为执行主体的自动化攻防能力,针对公司海量业务与资产开展持续性的漏洞挖掘与渗透测试,发现并收敛人工难以全面覆盖的安全风险; 2、负责自动化安全测试Agent的核心能力研发,使其具备自主威胁建模、规划探测与漏洞验证的攻击能力,持续优化Agent Harness,提升自动化攻防的深度与广度; 3、负责Agent自主执行在真实业务环境中的安全管控与护栏建设,保障其全程可控、可审计、可追溯,确保线上业务稳定运行; 4、模拟攻击者视角,围绕重点业务进行攻防演练与漏洞挖掘,聚焦攻击场景设计、风险研判与红线裁决,指挥Agent承担规模化的探测与验证执行,并联合产品BP团队推动安全问题的修复; 5、沉淀攻防方法论与专家实战经验,将其转化为可复用、可持续积累的Agent Skills与知识库,提升蓝军整体作业效率与对抗强度; 6、建设自动化攻防的能力评测体系,以数据驱动持续迭代,开展大模型与AI应用新型安全风险检测(如提示词注入、MCP与Skill投毒等)的前瞻研究与实战转化。

1、本科及以上学历,计算机、信息安全、人工智能等相关专业,具备扎实的攻防功底,熟悉主流Web/移动/二进制攻击技术与漏洞原理,熟悉渗透测试流程与ATT&CK方法论,具备复杂网络环境下的综合实战经验; 2、熟练掌握Python/Golang/Rust/JavaScript中的一门或多门,能够熟练使用Coding Agent交付高质量安全工具; 3、了解大模型原理、Agent架构、MCP及Skill调用机制,能够从技术原理层面分析攻击面并设计自动化攻击Workflow;偏工程方向者侧重Agent Harness优化与安全管控体系建设,偏攻防方向者侧重场景设计与经验沉淀,具备其一即可,兼备者优先; 4、具备AI原生的工作心态,善于借助Agent放大个人产能、将重复性攻防工作自动化;乐于挑战没有明显答案的问题,能够快速跟进前沿攻击技术并转化为实战能力; 5、具备良好的研究能力、逻辑思维与沟通协作能力,自驱、有好奇心,能够输出高质量的技术方案与文档。

加分项 1、具备自动化漏洞挖掘与渗透测试的项目实践、研究经验,或在相关开源社区有高质量贡献; 2、在知名安全赛事或SRC平台取得优异成绩,持有知名产品的高价值漏洞编号; 3、在大模型与AI安全方向有公开研究成果,如安全会议议题演讲、技术文章或白皮书等。

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ByteDance's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on ByteDance's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    ByteDance's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.