Security Engineer
CurrentOperating and managing network security appliance/application/device (DDoS, WAF, VPN, SIEM, IDS)Introducing and implementing entire process of security infra operating automation (Ansible(AWX), Linux, Docker, Git, Server)Proposing and implementing open-source based large scale full-packet storage and achiving cost savings of $2 million in 5 year TCO (Arkime, Linux, Elasticsearch, Kubernetes)Analyzing and improving IDS detection ratio as combined with full-packet storage solutionProceeding entire process of PoC which integrating open-source based IDS with SIEM (Suricata, splunk)