Security Operation Expert - Information System

The Information Systems Department is responsible for the planning and construction of the company's internal systems, including those for human resources, office services, finance, legal affairs, procurement, and approval, based on the company's internal system construction requirements. It also handles requirements and project management, information security management, system configuration, and operation and maintenance. The Privacy and Security Team focuses on the development and management of products related to internal data security and compliance governance. The main tasks include: - Designing, implementing, and operating ByteDance's eDiscovery and data vault products. 1. Responsible for the design and implementation of the global security data environment for CIS, and improve the internal data management level of the company. 2. Collaborate closely with upstream and downstream teams to optimize internal data usage processes and related tools, and improve the security level of internal data storage and management. 3. Incident Response & Mitigation: Manage and respond to cybersecurity incidents, pinpointing affected systems and clearly outlining risks and exposures. 4. Utilize data to measure security program effectiveness and coordinate the responsible disclosure of vulnerabilities. Minimum Qualifications: 1. Experience in developing tools and systems to automate security processes. 2. Experience with managing and responding to cybersecurity incidents, ensuring a structured approach to addressing security breaches. 3. Demonstrated ability to work effectively and technically with external security experts, fostering open and productive discussions about security. Preferred Qualifications: 1. Educational Background: A Bachelor's degree in Computer Science or a related field, with Related Certifications such as BSCP, OSCP, OSWE, OSCE3. 2. eDiscovery Related Experience: Understand the security management requirements related to eDiscovery. 3. Secure Software Development: Familiarity with best practices for integrating security throughout the software development process. 4. Data-Driven Security Improvement: Experience using data and metrics to evaluate program effectiveness, identify trends, and make informed strategic decisions. 5. Clear Communication: Excellent communication skills, with the ability to explain complex technical information simply and effectively to various audiences, from fellow engineers to company leaders.