고영진 Email & Phone Number

South Korea

서울 인천 지역

대한민구 서울

IT security Team Leader : Establish company information protection and privacy strategiesEstablishing/operating information security policies and organizing internal management systemsTraining for executives and employees, training for new employees, company information protection and personal information protection, annual training for IT workersInspection/diagnosis of information security, establishment of new feature vulnerability diagnosis criteria, and reflection of product owner's PRD stage reviewEstablish/operate information security systems, establish/operate IT security systems (network security, system security, PC security)Internal information leakage inspection, internal/external security audit, and accident response (2023.02)Obtain/maintain certification related to information security (ISMS, CBPR)Establishment of annual information protection and privacy roadmaps, quarterly action-item designation and implementation checkRevision of Privacy Policy--AWS Security Assessment* Account Management : * User account, IAM user group account, Manage key pair access and archiving * Admin Console policies and access key usge cycles * MFA settings, AWS account password policies* Manage permissions: instance service and network and other policies* Manage virtual resources : * Manage security group inbound/outbound ANY policy and setttings * Manage network ACL inbound and outbound traffic policies * Manage routing table policies and Internet gateway and NAT gateway connections * Manage S3 bucket/object access and RDS subnet availability zone* Operations management * EBS and volume encryption, RDS encryption, S3 encryption settings * Communication Zone, CloudTrail, CloudWatch, encryption Settings * AWS user account logging, Instance logging, RDS loggings settings

대한민국 서울

DBMS Security : DBMS Security TF Chief, DBMS security planning and operation, PC security planning and operationData Architect Team/DB Technical Team, DBMS security planning and operation, PC security planning and operationPlanning to build a design standardization system using Encore Meta# solutionsApplying a security score algorithm using DBMS attribute values. Construct a system that automatically calculates the security level of the target DB (security levels A, B, C, D). Registration of patent applications for the system and logic (suspension)Detailed planning, development, and operation of various DBMS account management systemsPlanning an integrated account management system for full provisioning of DBMS accounts and server OS accountsPlanning, test case, performance test for competing BMTs for the configuration of several DB access control systems such as Shakra/DB-i/DB Safer. Introduction configurationDB Security Officer responds to ISO27001 certification review DBMS Security TF Chief (Nate, Cyworld, Privacy Hacking Issue, 2011.06)Response to external agency investigation and preparation of dataEstablishment and operation of short-term, medium-term, and long-term measures for customer DB securitySOC(Security Operation Center) DB network separation system operation,Collects about 1000 queries in DB, inspects queries by workers. Calling. Approval system development and operation, audit workSecurity team, PC security area, DB security area (ISO27001, ISMS certification response)Introduction and Operation of the Next Generation FireWall (Paloalto) L7Internal information leakage prevention system, DLP (Gradius) operation, audit trailDeploy and operate multiple endpoint security solutions, including Privacy-i and DRM major performance : Responding to security incidents, preparing DB security management system composition and operation technology, and preparing personal information audit and operation methods in PCs

대한민국 서울

System Operations Team: Server, Network Security OfficerConfiguring OpenSource Systems with Linux SystemsUsing ipvsadm, build Server Load Balancer with Linux system, configure HA Configuring Heartbeat for FailoverLinux Iptables server firewall deployment operationsSystem Security OperationsApplying System Security Guide Development and DeploymentServer System Security Vulnerability Script Development ApplicationResponse to ISO27001 Certification Reviewmajor performance : VPN configuration operation, LDAP configuration operation, ISO27001 review preparation