- Seoul, Seoul, South Korea
- Full-time · Mid
- 5–8 years
Responsible for cloud and network security incident analysis and response, including log analysis, threat detection, and automation using AI tools.
Responsibilities
- Analyze cloud (AWS, Azure, GCP) and network intrusion indicators and respond to incidents
- Analyze cloud audit logs, network traffic, firewall/IPS/WAF logs to identify attack paths and impact
- Operate firewall (NGFW), IPS, WAF, SSL VPN and other security solutions and quickly establish and optimize threat-blocking policies
- Automate response using Playbook, SOAR, LLM, AI tools and apply auto-remediation to reduce detection-to-action time
- Collaborate with detection teams to feed back response results into detection rules and policies
Requirements
- Nice to have: Playbook design
- Nice to have: SOAR integration
- Nice to have: automation
- Nice to have: AI integration with security logs
- Nice to have: CNAPP operation