Information Security Engineer Intern, Security Assurance - 2025 Start

Responsibilities

About the Team The Security Assurance team is responsible for identifying security vulnerabilities and misconfigurations in numerous aspects of ByteDance applications, systems, and services. In this team, you will have a unique opportunity to learn and experience modern program analysis techniques that include fuzz testing, static analysis, and other hybrid and semi-automated approaches. This role isn't simply a "run a scan and report findings" type of job - it is an exciting and challenging internship that touches upon some of the most interesting aspects of security and software engineering. Our team of application security engineers is specialized in conducting penetration tests and security assessments that safeguard your digital assets. Hailing from diverse backgrounds, they share the same passion for cybersecurity, this group of professionals brings a fresh. Their collaborative spirit and adaptability enable them to tackle intricate challenges with innovative solutions, ensuring your systems remain fortified in the ever-evolving landscape of cyber threats. We are looking for talented individuals to join us for an internship in 2025. Internships at TikTok aim to offer students industry exposure and hands-on experience. Watch your ambitions become reality as your inspiration brings infinite opportunities at TikTok. Candidates can apply to a maximum of two positions and will be considered for jobs in the order you apply. The application limit is applicable to ByteDance and its affiliates' jobs globally. Applications will be reviewed on a rolling basis - we encourage you to apply early. Job Responsibilities This role may involve working with various other engineering teams such as product security and offensive security teams, multiple software engineering departments, research teams and infrastructure management. Some of the responsibilities include: - Performing penetration testing and secure code review - Writing and improving on dynamic testing tools such as fuzzing response analysis - Enhancing static analysis checkers used within TikTok - Give tech talks and demos to the team on the project you were working on

Qualifications

Minimum Qualifications - Currently pursuing an Undergraduate/Master degree in Digital Forensics, Cyber or Information Security, Computer Science, Information Technology or related field. - Able to commit to working for at least 12 weeks during 2025. - Programming and code review capabilities in at least one of the following languages: Golang, Python, TypeScript, Node.js - Familiarity with common security risks, including their principles, attack and defense strategies, and systematic governance and construction approaches. - Self-driven and capable of coping with ambiguity and applying theoretical concepts in practice - Demostrable interest in cybersecurity - Must obtain work authorization in country of employment at the time of hire, and maintain ongoing work authorization during employment. Preferred Qualifications - Graduating December 2025 onwards with the intent to return to degree program after the completion of the internship. - A good understanding of data structures, algorithms, and system security. - Track record of finding and reporting vulnerabilities or other bugs discovered through program analysis. - Conducting and publishing research in the program analysis field. - Experience participating in Bug Bounty (aka Vulnerability Reward) Programs, Capture The Flag, or ACM / Programming competitions - Track record of contributions to open source projects. By submitting an application for this role, you accept and agree to our global applicant privacy policy, which may be accessed here: https://careers.tiktok.com/legal/privacy. If you have any questions, please reach out to us at apac-earlycareers@tiktok.com

Job Information