Cybersecurity Engineer - Cloud Security
by ByteDance in Cybersecurity
The Cybersecurity Engineer - Cloud Security will join the Security team in Riyadh responsible for owning security for all services offered by Volcano Engine & BytePlus, a cloud service provider owned by ByteDance, including IaaS, PaaS and SaaS. The role focuses on designing and implementing robust cloud security architecture across physical hardware, operating system, cloud-native application, data security and privacy protection, insider threats and generative AI. The engineer will develop and enforce cloud security policies, standards, and procedures aligned with industry regulations and best practices, and conduct security risk assessments, security training, and vulnerability assessments to proactively identify and address security gaps. The position requires collaboration with cross-functional teams to integrate security controls into cloud products and underlying infrastructure, and staying abreast of emerging cloud security trends, technologies, and threats to provide guidance on security strategies and solutions. Candidates must be familiar with principles of common risks, attack and defense strategies, and systematically lead security architecture and risk governance. Required technical exposure includes cloud-native and infrastructure technologies such as network access, LLM, big data, storage, cloud computing, microservices, zero trust, container security technologies including Docker and Kubernetes, and serverless security best practices. Proficiency in at least one programming language among Golang, Python, Java, or NodeJS is required to perform code auditing/reviews and development. Knowledge of security frameworks and standards such as CIS Benchmarks, GDPR, and HIPAA is expected. Preferred qualifications include experience discovering major impactful vulnerabilities domestically or internationally, winning large-scale security competitions, leading or participating in large-scale governance, architecture, and design projects, strong understanding of cloud computing platforms such as AWS, Azure, and Google Cloud, and holding certifications including CISSP, CISM, OSCP, and GIAC Certifications.