K

KRAFTON

Develops and publishes cross-platform games

Web/API Vulnerability Assessment Engineer

Offensive Security & TestingPosted on Nov 9
Full-timeSeoul, South KoreaNo salary listed

About the Job

Requirements

  • Four to eight years of professional experience in web/API penetration testing or vulnerability assessment.
  • Understanding of web/API architecture and common security vulnerabilities, with the ability to conduct manual testing using tools such as Burp Suite.
  • Experience identifying authentication, authorization, or business-logic vulnerabilities and validating their real-world impact.
  • Ability to write or modify diagnostic scripts and tools in at least one programming language, such as Python.
  • Experience using LLM or AI tools for security assessment, and ability to explain their effectiveness and independently reproduce and validate results.
  • No disqualifying circumstances for overseas business travel.

Responsibilities

  • Conduct penetration tests and vulnerability assessments of game services and internal and external web, API, back-office, and operations tools.
  • Review the security of new and changed services, including scenario-based testing of key logic such as authentication, authorization, payments, and in-game currency.
  • Analyze major public vulnerabilities (CVEs) and proof-of-concept exploits, and assess their impact on internal services.
  • Report assessment findings, recommend remediation priorities and improvements, collaborate with development teams on fixes, and retest remediations.
  • Develop assessment tools using LLMs and AI agents, and automate repetitive testing, analysis, and reporting work.

Desired Qualifications

  • Experience assessing vulnerabilities in Android or iOS mobile apps and conducting static and dynamic analysis.
  • Experience assessing security of game-service account, payment, currency, or reward logic.
  • Experience analyzing and remediating vulnerabilities through source-code review.
  • Experience assessing the security of MSA- or cloud-based services.
  • Experience assessing security vulnerabilities in services based on LLMs or AI agents.

About the Company

KRAFTON

Develops and publishes cross-platform games

Krafton is a group of independent game studios that develops and publishes video games for PC, console, and mobile. Its business model centers on delivering high-quality games and monetizing them through game sales, in-game purchases, and licensing deals, with PUBG as a flagship title. Krafton differentiates itself by coordinating a network of studios and investing in technology and publishing support rather than relying on a single in-house studio, enabling a diverse catalog and esports initiatives. Its goal is to push the boundaries of gaming and connect people through shared entertainment moments across platforms.

Company size
51-200
Company stage
IPO
Headquarters
Seongnam-si, South Korea
Founded
2007

Recently Posted Jobs

Explore more opportunities at KRAFTON

See more jobs