Job Description
Krafton, a global game publisher known for its creative studios and unique games, is seeking a Senior Cloud Security Engineer to join their Infra Division in Seoul. The ideal candidate will have over 5 years of experience and a passion for securing cloud infrastructure.
This role involves managing the backend cloud infrastructure that supports Krafton's online games and platforms. The engineer will work in a CI/CD automated cloud environment, utilizing Infrastructure as Code (IaC) to configure and manage infrastructure.
Responsibilities:
- Designing and operating security policies for Public Cloud (AWS, Azure) based service infrastructure.
- Performing security checks and policy integration for IaC (Terraform, ARM, etc.).
- Designing access control and audit systems for databases (RDS, DynamoDB, MongoDB).
- Building CI/CD pipeline security automation and vulnerability diagnosis systems.
- Improving network, IAM, and data security architecture within the cloud environment.
- Configuring and monitoring CSPM detection, security log collection, and analysis systems.
- Internalizing DevSecOps systems such as SAST/DAST/Secret Scanning.
Requirements:
- Extensive understanding of Linux and Windows OS.
- Broad technical understanding of various IT security solutions (AD, next-generation firewalls, vulnerability assessment solutions, AWS security, etc.).
- Proficiency in scripting languages such as PowerShell, Bash, and Python.
- Experience in cloud infrastructure operation/management.
- Experience in mobile app or client/console game operation.
- No restrictions on overseas travel.
Preferred Qualifications:
- Experience with policy-based resource monitoring (AWS Config, Azure Policy, etc.).
- Experience using cloud-native security solutions (Prisma Cloud, Wiz, Snyk, etc.).
- Experience in security integration of multiple multi-account/multi-subscription environments.
- Experience in Kubernetes security configuration (RBAC, Pod Security, OPA, Kyverno, etc.).
- Experience in operation/development related to the above, even if not 100% matching.
- Proficiency in English or Chinese.