[Com2uS Platform Co., Ltd.] Hiring for Platform Technical Security Specialist

(주)컴투스플랫폼 · 서울 금천구 가산디지털1로 131

✨Job Description - Technical security review of new web services, platforms, and external integration APIs, and identification of security vulnerabilities - Penetration testing and in-depth vulnerability assessment for major web applications and REST/GraphQL APIs - Root cause analysis of vulnerabilities, provision of secure coding remediation guidance, and verification of remediation implementation - Review and optimization of rules for web-related information security systems (WAF, DDoS, etc.), and support for web intrusion incident investigations - Reproduction of PoCs for newly disclosed vulnerabilities (CVE) and open-source library vulnerabilities, impact analysis, and development of diagnostic automation tools ✅Qualifications - 2+ years of hands-on experience in information security, web vulnerability assessment, and penetration testing - Deep understanding of HTTP/HTTPS, Web Socket, and session- and token-based (e.g., JWT) authentication/authorization mechanisms - Ability to perform manual assessment using web proxy tools such as Burp Suite and analyze business logic bypass attacks - Ability to analyze service plans, architecture diagrams, and API specifications to derive technical security threats - Ability to use scripting languages (Python, Bash, Go, etc.) for automation of assessment tools and writing attack PoCs - Must have completed military service or be exempt, and have no disqualifying reason for overseas travel 💖Preferred Qualifications - Experience establishing and operating security review processes before the launch of new IT and web services - Experience operating policies for information security systems such as web firewalls (WAF), Anti-DDoS, or analyzing links to web intrusion incidents - Understanding of and experience assessing web application architectures based on public cloud environments such as AWS and GCP - Track record of vulnerability reports rewarded through domestic and international bug bounty programs (KISA, HackerOne, etc.) or CTF awards - Collaboration skills to communicate smoothly with related departments such as development and infrastructure and coordinate practical security remediation measures 🏠Work Location - 131 BYC Hi-City, Gasan Digital-ro 1, Geumcheon-gu, Seoul - 5-minute walk from Gasan Digital Complex Station on Subway Lines 1 and 7 ⚡️Recruitment Process - Application screening > First interview > Second interview > Compensation negotiation > Final acceptance 👉Recruitment Period/Method - Application period: open until filled 📋Other - Full-time employee (3-month probation) - During the probation period, 100% salary is paid, and personnel systems and benefits apply equally - Portfolio must be within 50MB, compressed into a single file for submission - If the file size exceeds the limit, write the portfolio link address in a memo file and upload it - Only applicants who pass document screening will be individually notified within 2–3 weeks - Contact email: recruit@com2us.com - After adding KakaoTalk friend '@컴투스채용', 1:1 inquiries are available