About the job
About the Team You’ll Join
- The Security Division at Toss Bank is composed of several specialized teams including Security Policy, Privacy Protection, System Security, Network Security, Security Red Team, Security Blue Team, IT Service, and Security Audit.
- As a Security Analyst at Toss Bank, you will be an integral part of the Security Blue Team, focusing on event analysis and incident response, as well as scenario-based threat modeling.
- The Security Division collaborates extensively with various teams to ensure the delivery of safe and reliable services. Notably, the Security Blue Team works closely with product organizations, Legal & Compliance, Platform Engineering, and Internal Audit to enhance service safety and compliance.
- Our commitment lies in securing electronic financial transactions for our customers and ensuring that security is seamlessly integrated into daily operations, providing a safe working environment.
Your Responsibilities
- Analyze and respond to security threats and incidents affecting customer services and employee work environments.
- Identify security threats and design operational scenarios through various logs collected in the SIEM system.
- Respond to events detected by security monitoring and review blocking policies for security solutions like DDoS, IPS, IDS, WAF, and AV to prevent recurrence.
- Enhance operational efficiency through the automation of repetitive security tasks, allowing security personnel to focus on more strategic responsibilities.
Ideal Candidate Profile
- Profound analytical skills for security events and logs, with a solid understanding of various attack techniques (TTPs) and Indicators of Compromise (IOC).
- Experience in deriving threats and responding through intrusion detection analysis tools and security solutions.
- Familiarity with creating advanced detection rules based on SIEM.
- Experience in developing automation scripts for security tasks using Python, PowerShell, or similar tools to improve operational efficiency.
Please Include in Your Resume
- If you have actual incident response experience, please detail the type of incidents, analysis processes, responses, and follow-up actions step by step.
- Experience in threat modeling through various security logs and direct response efforts is highly valued.
- If you have automated security tasks using Python or PowerShell, please specify the purpose, implementation, and improvements in operational efficiency.
- Avoid simply listing results; instead, describe your understanding and learning throughout the project.
Application Process at Toss Bank
- Application submission > Job interview > Cultural fit interview > Reference check > Compensation discussion > Final acceptance and onboarding.
Important Notes
- Employment may be revoked if any false information is found in the resume or if there are disciplinary actions in work history.
- Applicants with disqualifications as per Toss Bank’s employment regulations may have their applications canceled.
- Individuals with disabilities or those eligible for national veterans' benefits will be prioritized in accordance with relevant laws.
