IT Security Engineer -Bilingual (Korean/English)

Woongjin, Inc•Irvine, CA

12d•$80,000 - $95,000

About The Position

The IT Security Engineer is responsible for supporting the planning, implementation, and management of the organization's IT security infrastructure and policies. This role assists in identifying security risks, responding to incidents, and ensuring compliance with internal standards and external regulations.

Requirements

3 - 5 years of experience in IT security or related IT roles required
Knowledge of security technologies such as firewalls, IDS/IPS, antivirus, SIEM, and endpoint protection required
Strong problem-solving, analytical, and communication skills required
Bachelors Degree Required
Computer Science, Information Security, or a related field required
6 - 9 Years of Direct Experience Required
7 - 11 Years of Direct Experience Required
1 - 3 Years of Supervisory Experience Required
3–5 years of experience in IT Security or related IT roles required

Nice To Haves

Security certifications preferred (e.g., CISSP, CISM, CompTIA Security+, CEH) preferred

Responsibilities

Assist in developing, implementing, and maintaining IT security policies, standards, and procedures
Monitor and analyze security events, logs, and alerts using tools like Splunk of Sentinel to detect and respond to threats
Collaborate with internal IT teams and external vendors to improve overall security posture
Manage user access controls and identity management systems
Monitor and audit for potential security breaches, abnormal behavior, and unauthorized access
Verify that applied security policies are properly configured and effectively enforced
Monitor network, system, and application security to detect and respond to potential threats and vulnerabilities
Participate in incident response processes, including investigation, containment, recovery, and documentation
Assist in audits and ensure compliance with regulatory requirements
Support security awareness training and compliance initiatives for employees and third parties
Maintain up-to-date knowledge of cybersecurity trends, threats, and best practices
Document security configurations, procedures, and technical findings
Conduct vulnerability assessments