[Infra Div.] 클라우드·네트워크 보안 대응 엔지니어 (5~8년)

The role

This person will analyze and respond to security incidents in cloud and network areas. They will operate security solutions and automate responses using AI tools.

What you will do

• Analyze and respond to intrusion signs in cloud (AWS, Azure, GCP) and network areas
• Analyze attack paths and impact using cloud audit logs, network traffic, and security solution logs
• Operate security solutions like NGFW, IPS, WAF, and SSL VPN and establish threat blocking policies
• Automate responses using Playbook, SOAR, and LLM/AI tools
• Collaborate with detection organizations to feed back response results into detection rules and policies

Required qualifications

• 5 or more years of experience in information security or infrastructure security
• Experience analyzing and responding to incidents using cloud audit logs and security events in AWS, Azure, or GCP
• Experience identifying attack paths and impact using NGFW, IPS, WAF logs and network traffic
• Understanding of security protocols including TCP/IP, VPN, HTTPS, DNS, and authentication/authorization
• Experience establishing and applying threat blocking policies using NGFW, IPS, or WAF
• Experience solving practical tasks or improving them using generative AI or AI coding tools
• Ability to verify the accuracy of AI-generated analysis results, code, and policies
• Ability to prioritize and respond quickly in emergencies and explain decision grounds
• No disqualification for overseas business trips

Nice to have

• Experience automating security settings and response tasks using IaC tools like Terraform or CloudFormation or scripting languages
• Experience reducing response time through Playbook design, SOAR integration, or automatic blocking
• Experience implementing and improving repetitive workflows by linking AI with security logs and tools
• Experience detecting and responding to cloud threats by operating CNAPP
• Experience identifying intrusion traces and attack techniques through cloud/network forensics or malware analysis
• Experience operating security solutions in various vendor environments such as Palo Alto, Fortinet, Check Point, or TrendMicro
• Experience improving blocking accuracy and reducing false positives through WAF policy tuning and attack log analysis

Before you apply

• Hiring may close early upon completion of recruitment
• Interviews and job tests may be added if necessary
• A 5-month probationary period applies
• False statements in the resume may lead to the withdrawal of the employment offer

About the company

KRAFTON Security Team consists of Defensive Security and Offensive Security to manage service and infrastructure security for KRAFTON headquarters, PUBG, and various studios and subsidiaries.