Principle Security Engineer, Enterprise Security - San Jose

Responsibilities

Team Introduction
ByteDance's Enterprise Security team is responsible for global IT enterprise cyber security, server security, endpoint security, application security construction, and protection work. They work to improve overall enterprise security capabilities and security posture, providing security processes, security assessments, security operations, and security vulnerability management services. The team also supports enterprise security teams and business departments in meeting their security requirements.

Responsibilities
- Responsible for the design and implementation of enterprise security architectures and solutions, tracking the evolution of cutting-edge security technologies, and keeping update of the latest security threats and trends.
- Provide security solutions for business departments' requirements, keeping security solutions implementable and leading the implementation of these plans.
- Regularly assess and analyze weaknesses in the existing security architecture, provide improvement suggestions.
- Collaborate tightly and effectively with global & regional IT teams, Infrastructure teams and XFN business security teams to ensure the rationality and feasibility of security solutions, verifying the efficacy of security protection.
- Design, plan, and drive viable security solutions for enterprise security related requirements, enhancing the adaptability of security solutions to business needs.
- Focus on addressing requirements such as endpoint (include mobile devices) security, network security, data security, security operation and threat management etc.
- Assist in building and implementing IT security policies and standards to ensure compliance with internal and external regulations and requirements.
- Collaborate with the security tools operations team to drive the design and development of automated security operations and maintenance solutions.
- Provide technical support and training on security architectures and solutions to internal teams.

Qualifications

Minimum Qualifications
- 5+ years of experience in the cyber security industry, 3+ years hands on experience of security tools operation and maintenance , with 3+ years experience in security architecture or solution experience or 3+ years security tools operation team management experience.
- Practical experience in endpoint security, network security, data security, security operation and threat management etc. at least cover 2 domains.
- Familiar with various security devices and solutions, such as FW, IDS, NTA, VPN, zero-trust-related technologies and mainstream products, such as SASE, ZTNA, SWG, CASB etc. EDR, DLP, BYOD, MDM, Email security, identification security, FIDO2, SSO, vulnerability management., patching management. etc.
- Excellent problem-solving and analytical skills, able to quickly identify risks and provide solutions.
- Exceptional communication, coordination, and project management skills, enabling effective collaboration with teams at all levels and XFN teams.

Preferred Qualifications
- 3+ years of work experience in multinational corporations or large enterprises, Internet companies, global companies with enterprise network security design or operations experience; Global team management experience or multi time zone collaboration experience.
- Have a strong sense of responsibility and ownership , strong awareness of achieving goals.
- Familiar with mainstream security standards and frameworks, such as NIST, ISO2700X, Kill Chain, att&ck etc.
- Have cyber security certifications (e.g. CISSP, CCSP, CISM, etc.) is preferred.

Job Information

【For Pay Transparency】Compensation Description (Annually)

The base salary range for this position in the selected city is $199800 - $441600 annually.​

Compensation may vary outside of this range depending on a number of factors, including a candidate’s qualifications, skills, competencies and experience, and location. Base pay is one part of the Total Package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and restricted stock units.​

Benefits may vary depending on the nature of employment and the country work location. Employees have day one access to medical, dental, and vision insurance, a 401(k) savings plan with company match, paid parental leave, short-term and long-term disability coverage, life insurance, wellbeing benefits, among others. Employees also receive 10 paid holidays per year, 10 paid sick days per year and 17 days of Paid Personal Time (prorated upon hire with increasing accruals by tenure).​

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.​