Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

ClosedPosted 19 hours ago

Web安全研发工程师/专家（抖音账号安全方向） - 抖音研发

ByteDance19,169 open roles

Where
Shenzhen, Guangdong, Chinese Mainland

This posting closed on 2026-10-27. 19,169 other ByteDance postings are live.

Get the CV for this job

From $25 per CV, paid once. No subscription.

Still open, like this oneLive
  1. AI数据运营（生态方向）实习生（泰语） - TikTok3h agoByteDance · Shanghai, Chinese Mainland
  2. AI数据运营（生态方向）日语实习生 - TikTok3h agoByteDance · Shanghai, Chinese Mainland
  3. 越南类自营项目渠道实习生 - TikTok Shop3h agoByteDance · Shenzhen, Guangdong, Chinese Mainland
  4. 医学运营实习生 - 小荷健康3h agoByteDance · Beijing, Chinese Mainland

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. ByteDance postings stay open a median of 5 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 19 hours ago

ByteDance median: 5 days open

The posting

团队介绍：抖音研发部门负责多款大型产品的研发，包括但不限于抖音、西瓜视频、汽水音乐。加入我们，你将有机会参与亿级用户场景的开发与架构工作，使用前沿的技术助力业务一起不断成长。

1、建设Web账号安全能力，参与Web零信任体系建设，设计并落地会话与密钥绑定、短期凭证、请求签名及防重放等机制，降低登录态被盗用、复制和跨环境复用的风险； 2、负责浏览器侧安全工程，设计、开发和维护Web安全SDK及公共组件，解决密钥生命周期管理、跨域协同、存储异常和浏览器兼容等问题，推动安全能力在业务中规模化接入； 3、开展攻击分析与防护建设，围绕登录态窃取、扫码登录欺诈、脚本及无头浏览器滥用等场景，分析攻击链路与绕过方式，建设环境识别、挑战验证等能力，并与服务端风控协同落地； 4、保障安全机制的可用性，针对密钥丢失、存储清理、网络异常等场景，设计身份校验、会话恢复和分级处置流程，兼顾防护强度、误伤控制、登录成功率及性能。

1、具备扎实的研发能力；熟练掌握JavaScript/TypeScript，具有Web SDK、基础库或复杂Web系统研发经验，能够独立完成核心模块的设计、编码、上线与维护； 2、深入理解浏览器机制；熟悉浏览器安全模型、同源与跨域机制、Cookie、浏览器存储及Web Crypto等能力，能够分析不同浏览器和运行环境下的行为差异与安全边界； 3、具备账号安全或Web安全实践；理解身份认证、会话管理、凭证保护、请求签名及防重放机制；能够分析XSS、会话劫持、凭证重放、自动化滥用等风险，并设计可实施的防护方案； 4、具备完整的工程交付经验；能够与服务端共同设计认证、验签及异常处理链路，熟悉兼容性治理、性能优化、灰度发布和线上问题定位，有亲自推动安全能力进入生产环境并持续维护的经历。

加分项 1、有账号系统、Web安全SDK、反自动化或反欺诈系统的研发经验； 2、有WebAuthn/Passkey、浏览器密钥管理、设备绑定会话或跨设备认证相关实践； 3、具备浏览器调试、协议分析、攻击复现或逆向分析能力，并有将研究成果转化为线上防护能力的案例。

Posting text belongs to the employer. Removal requests: contact us.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ByteDance's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ByteDance's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ByteDance's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.