K

KRAFTON

Develops and publishes cross-platform games

Threat Response Engineer

Security Operations & Incident ResponsePosted on Nov 9
Full-timeSeoul, South KoreaNo salary listed

About the Job

Requirements

  • Experience using endpoint security solutions such as EDR and EPP to identify and analyze signs of compromise or suspicious activity and design and improve detection policies.
  • Experience using varied security data in SIEM to design and develop correlation rules and threat-detection scenarios, and improve detection quality through false-positive and false-negative analysis.
  • Experience analyzing attacker tactics, techniques, and procedures using CTI, OSINT, and MITRE ATT&CK, and reflecting findings in detection scenarios or conducting hypothesis-driven threat hunting.
  • Experience applying generative AI or AI coding tools to practical security tasks such as security analysis, writing detection rules and queries, or developing automation scripts.
  • Ability to verify the accuracy of AI-generated analysis, code, and queries, and apply them while considering sensitive information and access permissions.
  • Ability to clearly explain analysis and reasoning and collaborate with relevant development, infrastructure, and IT operations teams.
  • No impediment to overseas business travel.

Responsibilities

  • Operate security solutions such as EDR, EPP, and SIEM, and design and improve detection policies and correlation-analysis rules.
  • Identify and analyze signs of compromise and improve detection quality through false-positive and false-negative analysis.
  • Analyze attacker tactics, techniques, and procedures based on CTI and MITRE ATT&CK, and conduct threat hunting.
  • Collect and normalize cloud, network, and web security logs, and support incident analysis.
  • Use LLM and AI tools for event classification, writing detection rules and queries, and automating repetitive tasks.
  • Coordinate threat response with relevant organizations.

Desired Qualifications

  • Experience collecting and normalizing SIEM logs and building and operating security data pipelines.
  • Experience conducting threat detection and incident analysis in cloud environments such as AWS, Azure, or GCP.
  • Experience conducting threat detection and analysis using network and web security logs.
  • Experience using at least one programming or scripting language to automate security analysis and detection work or develop related tools.
  • Experience integrating AI with security data and tools to implement repeatable workflows for event classification, investigation support, and detection-rule validation, and measuring and improving their effectiveness.
  • Experience identifying traces of compromise and attack techniques through digital forensics or malware analysis and applying findings to threat detection and analysis.

About the Company

KRAFTON

Develops and publishes cross-platform games

Krafton is a group of independent game studios that develops and publishes video games for PC, console, and mobile. Its business model centers on delivering high-quality games and monetizing them through game sales, in-game purchases, and licensing deals, with PUBG as a flagship title. Krafton differentiates itself by coordinating a network of studios and investing in technology and publishing support rather than relying on a single in-house studio, enabling a diverse catalog and esports initiatives. Its goal is to push the boundaries of gaming and connect people through shared entertainment moments across platforms.

Company size
51-200
Company stage
IPO
Headquarters
Seongnam-si, South Korea
Founded
2007

Recently Posted Jobs

Explore more opportunities at KRAFTON

See more jobs