cybersecurity, DevSecOps, penetration, CI/CD, CNAPP, SIEM, POC

He is a cybersecurity professional based in Korea with experience across cloud security, DevSecOps, penetration testing, and compliance. He is currently working as a Senior Technical Engineer (freelance), where he leads security initiatives including ISO 27001 transition audits and red team-style penetration testing engagements for enterprise and government clients.

Prior to this, he worked as a Cloud Security Manager in a managed service environment, where he was responsible for securing CI/CD pipelines, implementing cloud security solutions, and managing enterprise security platforms. His work included deploying CNAPP solutions, migrating SIEM infrastructure, and conducting security testing activities across cloud environments.

Earlier in his career, he worked as a Security Engineer, focusing on compliance audits and security assessments for enterprise clients, including public sector organizations. Across his roles, he has gained experience in security operations, compliance, and hands-on technical implementation in real-world environments.

2.       What skill(s) / experience would you self-describe as strongest or specialist in?

He specializes in cloud security, penetration testing, and security compliance, with strong experience across Azure environments, DevSecOps pipelines, and security infrastructure. He has hands-on experience in vulnerability assessment, red team operations, and implementing enterprise security solutions across cloud and on-premise systems. Technically, he brings expertise in security tools and frameworks such as SIEM platforms, CNAPP solutions, and penetration testing environments (Kali Linux, Metasploit). He is also experienced in scripting and automation using Python, enabling him to support incident response and security operations. In addition, he demonstrates strong analytical capabilities in threat modelling, incident investigation, and root cause analysis. He also has experience supporting technical discussions and delivering solution explanations in client-facing contexts.

3.       Do you have the list of key criteria according to the client’s requirements?

The candidate aligns strongly with the client’s requirements in the following areas:

Pre-sales & customer-facing experience – Some exposure to client discussions and solution demonstrations, particularly during cloud security solution implementations, but not a dedicated pre-sales role.

Application cybersecurity expertise – Strong background in general cybersecurity, cloud security, and penetration testing, with broad technical exposure across domains.

POC / solution delivery experience – Experience supporting solution implementation, testing, and security validation; however, limited direct ownership of structured POC-driven sales cycles.

Language capability – Based in Korea with experience delivering technical discussions in English, indicating capability in bilingual environments.