Security Tech Lead – Global E-Commerce Security Platform
| Company | ByteDance |
|---|---|
| Location | San Jose, CA, USA |
| Salary | $Not Provided – $Not Provided |
| Type | Full-Time |
| Degrees | Bachelor’s |
| Experience Level | Senior |
Requirements
- A bachelor’s degree in computer science, engineering, or a related field.
- 5+ years of related experience in data security.
- Familiar with computer network principles, understanding of HTTP principles and operating mechanisms, and capable of HTTP log auditing and analysis.
- Data analysis capabilities: Have big data analysis and development capabilities in the Hive environment, and be able to discover threats and risks based on data analysis.
- Security attack and defense capabilities: Familiar with the principles and utilization methods of security vulnerabilities that can lead to data leakage (server/client), and have relevant vulnerability repair and solution reinforcement capabilities.
- Experience in the construction of data security prevention and control links.
- Practical experience and capabilities in the best practices and solution construction processes for preventing various data leakage channels.
Responsibilities
- Responsible for building the overall data security defense line for the Global E-commerce platform, designing comprehensive prevention and control plans for user-sensitive information and commercial data.
- Monitor and analyze emerging cyber threats, vulnerabilities, and exploits related to our infrastructure and products.
- Research new methods and technologies for detecting cyber threats, identifying signals, and developing data-driven approaches that utilize these signals to detect security threats and breaches.
- Conduct Data Leakage Prevention and internal data management through multiple channels such as platform, ecosystem, and office, ensuring minimal data usage and proper disclosure to protect the privacy and confidentiality of consumers, merchants, and the platform.
- Work with the big data stack, designing and developing highly scalable systems for full data lifecycle protection, including but not limited to data classification, access control, encryption, masking, auditing, and alerting.
- Design a sensitive data prevention and control solution for the Global E-commerce full-link platform, successfully implementing the overall solution through cross-team collaboration to ensure that the risk of data being crawled and stolen is controllable.
- Based on the data usage scenarios of downstream partners and ecological ISVs, design data disclosure and reasonable usage plans, standardizing appropriate data usage by third-party partners to ensure downstream sensitive data is not misused or stolen.
- Develop an overall reasonable usage plan for Global E-commerce data within office and production environments, ensuring that key business data and personal privacy data are not misused or stolen through proper data lifecycle management.
Preferred Qualifications
- Experience in e-commerce and retail related fields.
- Experience in data platform related product development or big data technologies, such as Hadoop, ClickHouse, etc.