Security Operations Engineer & Software Developer with an enterprise-scale background. Specializing in building secure, high-performance web architectures and conducting rigorous vulnerability assessments. Currently dispatched to a top-tier South Korean tech conglomerate's semiconductor division, managing information leakage prevention and security infrastructure.
- Vulnerability Assessment: OWASP Top 10 analysis (XSS, SQLi, CSRF), Web/Cloud security auditing.
- Security Tools: Burp Suite, OWASP ZAP, nmap, Wireshark, Metasploit.
- Operations: SIEM (Splunk), EDR (Cybereason), Linux system hardening, Network traffic analysis.
- Secure Coding: JWT-based Auth architecture, RBAC design, and session security implementation.
- Frontend: React, Next.js, React Native, TypeScript, Tailwind CSS.
- State Management: TanStack Query, Zustand, Recoil.
- DevOps & Cloud: AWS (S3, CloudFront), Vercel, Docker, GitHub Actions (CI/CD Optimization).
- Languages: JavaScript (ES6+), TypeScript, Python, C/C++, Java.
- Conducted full-spectrum security diagnostic on production-grade web platforms.
- Performed authentication bypass tests and token theft simulations using Burp Suite.
- Mitigated risks in AWS S3/CloudFront environments by implementing strict CORS and CSP policies.
- Engineered a unified platform for official websites and community management using Turborepo.
- Optimized CI/CD pipelines via Turbo filter, reducing build times by executing selective builds based on changed packages.
- Security Operations Engineer @ SECUI (Samsung DS Dispatched)
- B.S. in Computer Science & Buddhist Studies @ Dongguk University
- Security Academy 6th @ SECUI Track
- π Blog: velog.io/@dewbeeny
- π’ Professional Identity: Soobin K.


