Senior Security Operation

Role and Responsibilities Conduct regular cloud security reviews across multi-cloud environments (configuration assessment, IAM review, network security, data protection, logging/monitoring). Evaluate and enforce cloud security best practices Collaborate with cloud and infrastructure teams to design and implement secure architectures. Perform technical risk assessments on cloud workloads, applications, and infrastructure. Lead on-premise server security operations, including patching, hardening, and security configuration. Oversee backup and recovery strategy to ensure availability and integrity of critical systems. Manage and coordinate server migration activities (on-prem to cloud or cross-platform). Monitor and respond to security alerts, logs, and incidents involving cloud and on-prem environments. Conduct limited penetration testing and vulnerability assessments (in-house or tool-assisted). Verify and validate vulnerability findings and work with system owners on remediation plans. Support development and enforcement of security policies and standards, including review secure development criteria prior product release. Provide guidance and mentorship to junior engineers on secure operations and best practices. Work closely with security assessment, audit, and compliance teams to ensure systems meet regulatory and organizational requirements. Participate in incident response activities, including root cause analysis and post-incident hardening. Maintain up-to-date knowledge on emerging threats, security technologies, and cloud service enhancements. Skills and Qualifications Bachelor's degree in Computer Science, Information Security, or a related field. Minimum of 4-5 years of experience in cybersecurity, with a focus on secure infrastructure covering cloud and on-premise environments. Deep knowledge of cloud environment (AWS/Azure/GCP/Alibaba Cloud) logging, IAM, network architecture, and native security services. Experience with securing and hardening Windows & Linux Strong understanding of network security principles, including firewalls, WAF, VPNs, and proxy, etc. Experience with security & privacy standard and regulatory compliance (e.g., ISO27001, NIST, GDPR and PDP Law) and audit processes. Familiarity with secure architecture design and implementation. Knowledge of integrating security into CI/CD pipelines and experience with secure development practices Experience in monitoring, analyzing, and responding to security alerts and incidents. Certifications preferred: GCP/AWS Solution Architect or Security Specialty, CompTIA CySA Security+, CCSP, CISSP, CCSK, CISM Excellent analytical, troubleshooting, communication and interpersonal skills English for communication both verbal and written is a must (able to speak Korean is a plus).