Job Description

Team Introduction
The team’s mission is to build infrastructures, platforms and technologies, as well as to support cross-functional teams to protect our users, products and infrastructures. The hiring team is responsible for offensive security, threat emulation, penetration testing, and defensive strategy development. You will work closely with security engineers and cross-functional teams to assess and improve the security posture of ByteDance products and systems. You will also have chance to work on AI-driven attack and defense research, security assessments of AI systems, and applying AI techniques to enhance security operations.

We are looking for talented individuals to join us for an internship. Our internship program offers students hands-on experience, industry exposure, and opportunities to apply their knowledge to real-world challenges while building a strong foundation for personal and professional growth.

Interns will gain practical experience, explore potential career paths, and participate in social events, learning programs, and development workshops alongside industry professionals.

Candidates may apply to a maximum of two positions across Our Company and its affiliates globally. Applications will be considered in the order they are submitted.

Applications are reviewed on a rolling basis, so we encourage you to apply early. Please clearly state your availability in your resume, including your start and end dates.

Responsibilities
- Plan and execute penetration tests, red team operations, and security assessments against internal systems, applications, and infrastructure.
- Identify, analyze, and document vulnerabilities and potential risks in staging and production environments.
- Conduct technical security reviews for new services, features, or platform changes.
- Collaborate with product and engineering teams to suggest effective defense-in-depth controls and mitigation strategies.
- Research and evaluate AI-specific threats, such as prompt injection, data poisoning, model inversion, model extraction, and jailbreak attacks.