{"id":3728679,"url":"https://alion.io/job/bytedance-application-security-engineer-gec-singapore","title":"Application Security Engineer - GEC - Singapore","company":{"id":13,"name":"ByteDance","domain":"bytedance.com","url":"https://alion.io/company/bytedance","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Feishu","truth_index":{"grade":"A","score":87,"open_postings":9620,"ghost_share":0.125,"stale_share":0,"repost_share":0.003,"time_to_fill_p50_days":287,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Java","optional":false},{"name":"Node JS","optional":false},{"name":"Python","optional":false},{"name":"SDL","optional":false},{"name":"Threat Modeling","optional":false},{"name":"C","optional":true},{"name":"JavaScript","optional":true}],"status":"closed","first_seen_at":"2026-11-04T04:16:31Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-09T08:34:40Z","board_verified":false,"closed_at":"2026-11-09T08:34:40Z","days_open":5,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":5},"description":"岗位职责 / Responsibilities\nWe are the Global e-Commerce Security BP team. We partner closely with product, engineering and operations to safeguard Global e-Commerce across regions. Our scope covers application security, data security and architecture security. We build and operate the SDL/DevSecOps security program, conduct threat modeling, code reviews, penetration testing, red/blue exercises and vulnerability management, respond to security incidents rapidly and drive systemic fixes. We value pragmatism, ownership and cross-team collaboration, protecting business growth and user trust at global scale.\nResponsibilities:\n- Conduct vulnerability discovery and risk management for Global e-Commerce business-related applications and APP products, and provide security assurance and support for key projects.\n- Participate in the construction and optimization of the SDL security system and processes, proactively mitigate potential security risks during the design and development phase, and systematically address security risks from the architectural level.\n- Responsible for building security-related capabilities and processes, including security assessment, code auditing, penetration testing, vulnerability discovery, and attack and defense drills, and working closely with the product development team to improve the business's security level.\n- Track domestic and international security trends and vulnerabilities, respond quickly to security incidents, propose solutions and technical analysis, and coordinate with multiple departments to handle them.\n任职要求 / Requirements\nMinimum Qualifications\n- Solid understanding of common Web/App/System vulnerabilities and remediation.\n- Strong white-box auditing skills; able to review Python/Go/Node.js/Java; capable of automating repetitive tasks.\n- Experience participating in SL/DevSecOps security practices (policies, controls, scanning tools) and collaborating with product and engineering teams.\n- Fast learning and analytical problem-solving skills; keeps up with the latest security trends.\n- Excellent communication, collaboration and professional ethics.\nPreferred Qualifications\n- Experience building or optimizing SL/DevSecOps security programs at scale.\n- Deep expertise in one or more areas: application security, data security, privacy compliance, architecture security.\n- Experience with red/blue exercises, incident response and cross-regional security operations.","description_format":"text","description_chars":2434,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Commerce","Advertising","Digital Media"],"lifecycle":[{"event":"open","at":"2026-11-04T06:47:13Z"},{"event":"close","at":"2026-11-09T08:34:40Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/bytedance-application-security-engineer-gec-singapore","json_url":"https://alion.io/job/bytedance-application-security-engineer-gec-singapore.json","meta":{"generated_at":"2026-11-10T02:42:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6316,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-11T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":13},"rest":"https://alion.io/mcp/rest/get_company?id=13"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbytedance-application-security-engineer-gec-singapore"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbytedance-application-security-engineer-gec-singapore"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbytedance-application-security-engineer-gec-singapore"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bytedance-application-security-engineer-gec-singapore\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbytedance-application-security-engineer-gec-singapore"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3728679}},{"tool":"search_jobs","arguments":{"company":"bytedance.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3728679},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}