Security Engineer

Responsibilities but not limited to:

• Monitor and manage security tools, including XDR/EDR, SIEM, vulnerability scanners, and email security, and review security dashboards and alerts daily.

• Coordinate with the external SOC on alert triage and escalation, document alert dispositions (true positive, false positive, benign), and escalate confirmed incidents.

• Act as first responder on security incidents, handling triage, containment, evidence collection with chain-of-custody documentation, and forensic analysis.

• Develop, tune, and test SIEM detection rules, correlation logic, and SOAR playbooks to improve automated detection and response.

• Conduct proactive threat hunting across endpoint, network, and cloud telemetry, and support purple team exercises with the SOC.

• Monitor threat intelligence sources (NVD, CISA alerts, vendor bulletins), turn relevant advisories into detection signatures, and use them to prioritize vulnerabilities.

• Run vulnerability scans and assessments with tools such as Nessus and Kenna, track remediation and patch compliance, and follow up with IT teams on overdue items.

• Perform web application security assessments (OWASP Top 10) and internal penetration tests, and coordinate external penetration testing engagements and validation of their findings.

• Collect and maintain PCI-DSS compliance evidence, carry out access reviews (AD, AWS IAM) and configuration audits, and support external audits with technical walkthroughs.

• Implement and maintain security controls on AWS cloud infrastructure, including WAF rules, security groups, and network ACLs, and support firewall rule management.

• Support PAM operations, USB and external storage controls (SecurA), endpoint compliance monitoring, and Zero Trust initiatives such as micro-segmentation and identity verification.

• Lead or carry out assigned technical work on security projects such as PAM deployment, tool rollouts, and compliance initiatives.

• Run security awareness training and phishing simulation campaigns, manage the training platform, and track completion rates.

• Handle security account provisioning, access requests, and onboarding/offboarding security checklists, keep policies and runbooks up to date, and produce weekly and monthly security metrics reports.

Qualifications / Skills:

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.

• 4+ years of experience in information security, security engineering, security operations, or IT infrastructure (level I or II based on experience).

• Solid knowledge of network security (TCP/IP, DNS, firewall, VPN, IDS/IPS, network segmentation) and operating system security and hardening (Windows Server, Linux).

• Hands-on experience operating security tools, including SIEM/XDR, endpoint protection, and vulnerability scanners (Nessus, Kenna, Nmap), and with alert analysis, triage, and patch coordination.

• Experience in security incident response and forensic analysis, and knowledge of common attack vectors (phishing, malware, ransomware) and the MITRE ATT&CK framework.

• Familiarity with detection engineering, threat hunting, and security automation, including SOAR platforms and playbook development.

• Scripting skills for security automation (Python, PowerShell, or Bash), and knowledge of penetration testing tools and methods (Burp Suite, Metasploit, OWASP).

• Cloud security experience, preferably AWS (IAM, Security Groups, CloudTrail).

• Experience with PCI-DSS or other compliance frameworks, ideally in retail, and experience working with an external SOC or MSSP is preferred.

• Certifications such as CompTIA Security+, CySA+, CEH, or GSEC are preferred; advanced certifications (CISSP, GCIA, GCIH, SSCP) are a plus.

• Bilingual in Korean and English preferred

Benefits:

• Health, Dental & Vision insurance / EAP (Employee Assistance Program) per company policy

• 401 (k) Retirement Plan with up to 5% match per company policy

• Life Insurance and AD&D (Accidental death & Dismemberment) per company policy

• BTA Insurance (Business Travel Accident Coverage)

• Company provided lunch

• Paid-time off (PTO) and Paid Holidays per company policy

• Celebration & Condolence Benefits per company policy

• Smart Card: Earn additional 4 points to the standard $1 = 1 point

• Holiday Gift certificates per company policy

• FSA (Flexible Spending Account) per company policy

• DCFSA (Dependent Child Care Spending Account) per company policy

Work Hours

• MON-FRI, 8:30am to 5:30pm

Compensation

• $87,450 - 134,200 per year

*Actual compensation will be determined based on relevant experience, qualifications, skills, and other job-related factors.