Industrial Security Senior Engineer

SK hynix•San Jose, CA

About The Position

As an IT Security expert at SK hynix Memory Solutions America, the Industrial Security Senior Engineer is responsible for operating and managing the organization’s security solutions and providing IT security services. The role supports IT security reviews, carries out security projects, and responds to external hacking attempts and security incidents. The position establishes, reviews, and revises company-wide security policies and regulations in response to business changes and regulatory requirements. It also oversees security awareness and training, enterprise security technologies, security monitoring and incident response, vulnerability assessments, system security reviews, audit and compliance support, and physical security controls. The engineer collaborates with IT operations and development teams to integrate security requirements and maintains current knowledge of evolving threats and security practices.

Requirements

At least 5 years of relevant experience in information security, network security, industrial security, or a related discipline.
Ability to lead projects, exercise sound security judgment, and work effectively with technical teams, business stakeholders, and external service providers.
Business proficiency in English and Korean, including the ability to write documents and reports, conduct meetings, and communicate with internal and external stakeholders in both languages.
Strong hands-on experience configuring, operating, and troubleshooting enterprise network security solutions, including firewalls, VPN, proxy, NAC, IPS, and SSL inspection.
Strong working knowledge of endpoint and information protection solutions, including EDR, DLP, DRM, email security, and security monitoring tools.

Nice To Haves

Experience in a multinational organization supporting corporate or R&D environments.
Experience with physical security systems, security audits, or corporate security policy implementation.
Experience managing security vendors, budgets, or procurement.
Familiarity with security considerations for cloud services, AI technologies, and internally developed applications.
Relevant professional or vendor-specific security certifications.

Responsibilities

Establish, review, and revise company-wide security policies and regulations to align with business changes and regulatory requirements.
Plan and deliver annual security training for all employees.
Design and run security awareness campaigns and activities.
Develop and oversee security policies, access control policies, and policies for security solutions such as firewalls.
Operate and maintain security solutions, including SIEM, EDR, IPS, and WAF.
Monitor and analyze security logs and network traffic, using packet analysis to identify and address threats.
Proactively monitor for intrusion attempts, malicious activity, and unusual behavior, and respond to them.
Conduct security assessments for new systems, applications, and infrastructure modifications.
Identify security vulnerabilities by evaluating network, server, and application architectures.
Deploy vulnerability assessment and diagnostic tools to identify and remediate security risks.
Investigate security incidents, perform root cause analysis, assess impact, and implement corrective actions.
Conduct comprehensive security reviews for information system deployments and changes.
Support external security audits and required compliance work.
Collaborate with IT operations and development teams to integrate security requirements.
Maintain knowledge and skills concerning evolving threats, attack methods, and security best practices.
Operate and manage physical security controls, including access control, CCTV, and security systems.
Provide IT security services, support security reviews, carry out security projects, and respond to external hacking attempts and security incidents.