Cloud Security Architect

About the role

The Cybersecurity team at ByteDance’s Volcano Engine & BytePlus is responsible for securing all cloud services (IaaS, PaaS, SaaS). You will join a forward‑thinking team that designs and implements robust security solutions for cloud environments, protecting sensitive data and ensuring system resilience.

Key responsibilities

• Design, implement, and oversee cloud security architecture covering hardware, OS, cloud‑native applications, data privacy, insider threats, and generative AI.
• Develop and enforce security policies, standards, and procedures aligned with industry regulations.
• Conduct risk assessments, security training, and vulnerability assessments to proactively close gaps.
• Collaborate with cross‑functional teams to embed security controls into cloud products and infrastructure.
• Monitor emerging cloud‑security trends, technologies, and threats, providing strategic guidance.

Required profile

• Understanding of common risks, attack and defense strategies, and systematic security architecture governance.
• Familiarity with cloud‑native technologies (network access, LLM, big data, storage, microservices, zero‑trust).
• Experience with container security (Docker, Kubernetes) and serverless security best practices.
• Proficiency in at least one programming language (Golang, Python, Java, or NodeJS) for code review and development.
• Knowledge of security frameworks and standards such as CIS Benchmarks, GDPR, and HIPAA.
• Strong communication, teamwork, professional ethics, and risk awareness.

Required skills

• Cloud security architecture
• Docker
• Kubernetes
• Serverless security
• Golang
• Python
• Java
• NodeJS
• AWS
• Azure
• Google Cloud
• CIS Benchmarks
• GDPR
• HIPAA
• Zero Trust
• LLM
• Big Data
• Microservices