security, Firewalls, EDR, NDR, NAC, IPS/IDS, TTPs, POC

He is a Senior Security Operations Architect and Threat Intelligence Specialist with over 10 years of experience across the high-stakes manufacturing and tech landscapes of South Korea and China. Currently, he is a Security Operations Engineer at XXXX in China branch, where he leads threat detection using IBM QRadar, analyzing malware activity and managing real-time incident response within complex OT/manufacturing environments. He manages a comprehensive suite of security solutions, including Firewalls, IPS/IDS, VPN, NAC, EDR, and NDR, ensuring a multi-layered perimeter. He also specializes in “Intrusion Reconstruction,” documenting attacker TTPs (Tactics, Techniques, and Procedures) and updating incident playbooks to prevent future breaches. And aggregates indicators from DLP, MDM, and EDR to monitor for privilege abuse and data leakage, securing evidence for containment actions. Before this, he served as a specialized Sales Engineer for XXXX’s AI-driven Network Detection and Response (NDR) platform. He acted as the POC Lead, crafting tailored demonstration plans and setting up complex test environments to showcase AI-based threat detection to enterprise clients. He also delivered high-impact intelligence reports during the POC phase, translating technical “anomalies” into actionable business risk assessments. And he managed the full lifecycle of technical issue resolution, prioritizing open tickets and documenting preventive measures for a seamless customer transition.

2.       What skill(s) / experience would you self-describe as strongest or specialist in?  

Strongest skills would be OT & Manufacturing Security and NDR & Pre-Sales Leadership. He correlates real-time logs to identify potential intrusions before they escalate, maintaining the high availability required for semiconductor manufacturing. He works with the SOC to “stress-test” playbooks, ensuring that the response team is prepared for specific industry-targeted attack vectors. Because of his tenure at XXXX, he is an expert at showing customers the “invisible” threats within their networks. He bridges the gap between complex AI-driven anomalies and a customer’s specific security requirements. And possesses the investigative grit to manage ticket prioritization and root-cause analysis, ensuring that pre-sales demonstrations are stable and convincing.

3.       Do you have the lists of key criteria’s according to the clients’ requirements?

He is a Senior Security Operations Architect and Threat Intelligence Specialist with over 10 years of experience across the high-stakes manufacturing and tech landscapes of South Korea and China. He has designed POC plans, set up testing environments, and executed technical demonstrations for customers. He also has deep experience in the specific domains requested, including NDR (Network Detection and Response), SIEM, WAF, and EDR. Moreover, he has practical experience demonstrating attacks based on OWASP Top 10 (SQL injection, XSS, CSRF). And he has a proven track record of investigating root causes, resolving open tickets, and managing incident playbooks