字节跳动安全研发工程师-密码安全
社招全职2年以上A252845A地点：杭州状态：招聘
任职要求
1、计算机、EE、信息安全或相关专业本科及以上学历，2年以上大规模分布式互联网后端服务研发经验； 2、熟悉云原生技术，包括但不限于：Kubernetes、SPIFFE/SPIRE、Kata、Service Mesh（Istio、Envoy）、CNI（Calico、Cilium）； 3、精通Golang，了解C/C++/Java/Rust/Python中的一种或多种开发语言，具有丰富的开发、调试和性能优化等经验； 4、加分项：有应用密码学或安全产品开发经验 如：KMS，HSM，加密服务等； 5、了解公有云底层架构，有一方云产品的架构设计、研发实践经验，特别是物理网络、虚拟网络等领域。
工作职责
1、负责字节跳动全球生产网云原生场景下的密钥管理服务的研发； 2、负责火山引擎公有云、私有云、混合云等云原生场景下的云加密产品研发。
包括英文材料
学历+
Kubernetes+
https://kubernetes.io/docs/tutorials/kubernetes-basics/
This tutorial provides a walkthrough of the basics of the Kubernetes cluster orchestration system.
https://kubernetes.io/zh-cn/docs/tutorials/kubernetes-basics/
本教程介绍 Kubernetes 集群编排系统的基础知识。每个模块包含关于 Kubernetes 主要特性和概念的一些背景信息，还包括一个在线教程供你学习。
https://www.youtube.com/watch?v=s_o8dwzRlu4
Hands-On Kubernetes Tutorial | Learn Kubernetes in 1 Hour - Kubernetes Course for Beginners
https://www.youtube.com/watch?v=X48VuDVv0do
Full Kubernetes Tutorial | Kubernetes Course | Hands-on course with a lot of demos
Istio+
https://istio.io/latest/docs/examples/microservices-istio/
This modular tutorial provides new users with hands-on experience using Istio for common microservices scenarios, one step at a time.
https://www.freecodecamp.org/news/learn-istio-manage-microservices/
In a world without Istio, one service makes direct requests to another and in case of failures, the service is responsible for handling those.
Envoy+
https://www.envoyproxy.io/docs/envoy/latest/start/start
This section gets you started with a very simple configuration and provides some example configurations.
https://www.youtube.com/watch?v=E-UpGmj6B9M
Envoy is a key part of a number of service meshes currently on the market, including Istio and the Kuma CNCF Sandbox project.
Go+
https://www.youtube.com/watch?v=8uiZC0l4Ajw
学习Golang的完整教程！从开始到结束不到一个小时，包括如何在Go中构建API的完整演示。没有多余的内容，只有你需要知道的知识。
C+
https://www.freecodecamp.org/chinese/news/the-c-beginners-handbook/
本手册遵循二八定律。你将在 20% 的时间内学习 80% 的 C 编程语言。
https://www.youtube.com/watch?v=87SH2Cn0s9A
https://www.youtube.com/watch?v=KJgsSFOSQv0
This course will give you a full introduction into all of the core concepts in the C programming language.
https://www.youtube.com/watch?v=PaPN51Mm5qQ
In this complete C programming course, Dr. Charles Severance (aka Dr. Chuck) will help you understand computer architecture and low-level programming with the help of the classic C Programming language book written by Brian Kernighan and Dennis Ritchie.
C+++
https://www.learncpp.com/
LearnCpp.com is a free website devoted to teaching you how to program in modern C++.
https://www.youtube.com/watch?v=ZzaPdXTrSb8
Java+
https://www.youtube.com/watch?v=eIrMbAQSU34
Master Java – a must-have language for software development, Android apps, and more! ☕️ This beginner-friendly course takes you from basics to real coding skills.
Rust+
https://www.youtube.com/watch?v=BpPEoZW5IiY
In this comprehensive Rust course for beginners, you will learn about the core concepts of the language and underlying mechanisms in theory.
https://www.youtube.com/watch?v=lzKeecy4OmQ
Full Rust 101 Crash Course for beginners.
https://www.youtube.com/watch?v=rQ_J9WH6CGk
Python+
https://liaoxuefeng.com/books/python/introduction/index.html
中文，免费，零起点，完整示例，基于最新的Python 3版本。
https://www.learnpython.org/
a free interactive Python tutorial for people who want to learn Python, fast.
https://www.youtube.com/watch?v=K5KVEU3aaeQ
Master Python from scratch 🚀 No fluff—just clear, practical coding skills to kickstart your journey!
https://www.youtube.com/watch?v=rfscVS0vtbw
This course will give you a full introduction into all of the core concepts in python.
系统设计+
https://roadmap.sh/system-design
Everything you need to know about designing large scale systems.
https://www.youtube.com/watch?v=F2FmTdLtb_4
This complete system design tutorial covers scalability, reliability, data handling, and high-level architecture with clear explanations, real-world examples, and practical strategies.
相关职位
校招蚂蚁星计划 -
1. 面向金融等特定场景设计机器学习隐私保护方案，支持传统AI模型与大模型的隐私增强，构建兼顾模型性能、数据安全与实用性的AI系统； 2. 攻克大模型隐私微调与推理中的关键技术问题，基于数据安全、密码安全等多维安全技术构建全面的大模型隐私保护框架； 3. 跟踪AI隐私安全领域的国际前沿技术，主导先进技术创新并在开源社区或AI顶会中取得影响力成果。
社招A254482
1、基于容器/系统安全、可信执行环境（包括Intel SGX/AMD SEV等）、密码学等安全增强技术，开发AI安全产品和系统，实现LLM模型和数据安全和隐私保护增强； 2、深入理解AI模型/数据全生命周期的安全和隐私保护需求，设计和研发安全保护方案，对AI平台进行安全增强； 3、联邦学习框架和平台开发和优化。
更新于 2023-11-01
社招A223152
1、基于容器/系统安全、可信执行环境（包括Intel SGX/AMD SEV等）、密码学等安全增强技术，开发AI安全产品和系统，实现LLM模型和数据安全和隐私保护增强； 2、深入理解AI模型/数据全生命周期的安全和隐私保护需求，设计和研发安全保护方案，对AI平台进行安全增强； 3、联邦学习框架和平台开发和优化。
更新于 2024-01-04
社招2年以上A175100
1、负责字节跳动全球生产网云原生场景下的零信任身份体系，包括进程身份认证，安全信道构建等功能； 2、负责火山引擎公有云、私有云、混合云等云原生场景下的零信任身份体系。
更新于 2024-01-24