Skip to content

Open nowPosted 68 days ago

应用安全工程师 - 安全与风控

ByteDance19,209 open roles

Where
Beijing, Chinese Mainland
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen now应用安全工程师 - 安全与风控ByteDance · Beijing, Chinese Mainland
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ByteDance's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.1% of postings close within 7 days. Measured by our own scanner across the market. ByteDance postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.1%7 days
  4. 19.1%14 days
  5. 35.6%30 days
  6. 52.7%60 days
This job: posted 68 days ago

ByteDance median: 2 days open

The posting

团队介绍:我们团队为字节跳动旗下各类业务线提供信息安全保障。通过与各业务团队紧密协作,我们针对其特定的运营及业务需求,设计并落地专属安全策略。依托安全部门的专业能力,我们交付与业务目标高度契合、兼具成本效益与可扩展性的安全解决方案,助力各团队获取最高效、最可靠的安全服务与工具。

1、对国际商业化业务相关应用及APP产品做漏洞挖掘、风险治理,并对重点项目进行安全保障与支持; 2、参与SDLC安全体系及流程建设及优化,在设计开发阶段前置规避潜在安全风险,从架构层系统化解决安全风险; 3、负责安全评估、代码审计、渗透测试、漏洞挖掘、攻防演练等安全相关能力建设及流程建设,与产品研发团队紧密合作推动业务安全水位提升; 4、跟踪国内外安全动态、安全漏洞对安全事件进行快速响应提出解决方案和技术分析和多部门协同进行处理。

1、2027届获得本科及以上学历,计算机、网络工程、信息安全等相关专业优先; 2、熟悉常见Web/APP/系统漏洞原理与修复方案; 3、具备白盒审计能力,能审计Python/Go/Node.js/Java,具备自动化能力,能将重复工作自动化; 4、有参与SDLC/DevSecOps安全实践的经验(制度、管控、扫描工具),能与产品/研发协同推进; 5、具备快速学习与分析解决问题能力,持续关注安全前沿动态; 6、良好的沟通协作能力与职业操守。

加分项: 1、有大规模建设或优化SDLC/DevSecOps安全体系的经验; 2、在应用安全、数据安全、隐私合规、架构安全等方向具备深厚经验; 3、有红蓝对抗、应急响应、跨区域安全运营相关经历。

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ByteDance's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on ByteDance's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    ByteDance's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.