Senior Security Architect, Applied Field Engineering

1 мес. назад

South KoreaWorldwideSeniorOnsite

cloud securitycompliancedata securitysecurity architecture

Senior Security Architect role focusing on designing and implementing security mechanisms related to AI & Data Cloud with a specialization in South Korea.

Обязанности

Help to scope security related feature enhancements on behalf of customers to work with Product Management and Engineering on ways to enhance requirements for the local market.
Help drive adoption by advising customers and engineering teams on how to build secure Korea-compliant Data and AI architectures, ensuring implementations respect strict localization and regional access controls.
Collaborate with cross-functional teams, including Sales, Product, Engineering, Marketing, and Support in order to drive customer security feature adoption.
Partner with our Product Marketing team to define and support 's AI and Data Cloud posture and Security DataLake workload awareness and pipeline building via marketing initiatives including conferences, trade shows, and events.
Work and collaborate with other Field CTO members in areas as a security expert collaborating with Enterprise AI, Gen AI, Data Engineering and Applications teams at .
Share knowledge with internal and industry communities via webinars & conferences.

Будет плюсом

AWS/Azure/GCP security and / or networking specialty related certification achievement is a plus
Hands-on expertise with SQL, Python, and APIs
Hands-on expertise with software containerisation in Kubernetes, including the use of Terraform or similar technologies.
A background or experience in Governance, Risk, Compliance (GRC) and Infosec Auditing with relevant accreditations.
Any security operations experience in a Security Operations Environment, Security
Korean Manufacturing/Telco/Financial Services Vertical experience: Prior experience implementing cloud security architectures or handling compliance programs within various Korean verticals such as: Manufacturing Industry, Telecom, Financial Services, Retail.
Formal Certifications: Valid global security credentials (CISSP, CISM, or CISA) paired with official K-ISMS-P Lead Auditor/Assessor credentials.
DevSecOps & Coding: Hands-on expertise with SQL, Python, APIs, containerization (Kubernetes), and Infrastructure-as-Code (Terraform).
SecOps Experience: Prior experience working within a live Security Operations Center (SOC) or threat-hunting environment.
Enterprise SaaS Experience: Technical pre-sales or architecture experience supporting enterprise cloud or SaaS software sales cycles.
is growing fast, and we’re scaling our team to help enable and accelerate our growth. We are looking for people who share our values, challenge ordinary thinking, and push the pace of innovation while building a future for themselves and .
How do you want to make your impact?
For jobs located in the United States, please visit the job posting on the Careers Site for salary and benefits information: careers..com

Другое

At , we are powering the era of the agentic enterprise. To usher in this new era, we seek AI-native thinkers across every function who are energized by the opportunity to reinvent how they work. You don’t just use tools; you possess an innate curiosity, treating AI as a high-trust collaborator that is core to how you solve problems and accelerate your impact. We look for low-ego individuals who thrive in dynamic and fast-moving environments and move with an experimental mindset — who rapidly test emerging capabilities to discover simpler, more powerful ways to deliver results. At , your role isn't just to execute a function, but to help redefine the future of how work gets done.
We seek a highly specialised technical Senior Security Architect (SA) who practices security with an obsession for helping customers design and implement the best security mechanisms, particularly those that would relate to the AI & Data Cloud.
At , Security Architects are passionate about security, often involving tremendous technology challenges that require no simple solutions. Success requires working collaboratively with a broad range of people inside and outside the company.
Operating out of our APJ Field CTO Office , you will serve as our primary South Korean Security expert, who will be a cloud compliance evangelist, technical architect, and hands-on practitioner. This specialized role bridges the gap between global cloud data architecture and South Korea’s rigorous, localized regulatory frameworks, specifically the Cloud Security Assurance Program (CSAP) and the Korea Financial Services Institute (K-FSI) Safety Evaluation.
Verified Industry Experience: 7-10+ years of hands-on information security experience, with at least 5+ years focused squarely on cloud security architecture (AWS, Azure, GCP, or domestic Korean CSPs like Naver Cloud/NHN).
Mandatory Korean & English Fluency: Native or professional business fluency in written and spoken Korean is strictly required for regulatory filings, KISA/FSI communications, and complex technical documentation. Professional-level English is required for global HQ collaboration.
10+ years of industry, customer-facing, and hands-on implementation experience with a core focus on data concepts, privacy, governance, networking, infosec and security technologies.
Outstanding skills in presenting to both technical and executive audiences, whether impromptu on a whiteboard or using presentations and demos.
Experience selling enterprise SaaS software and working in the local South Korean market.
Korea-Specific Infrastructure Design: Proven experience designing and managing physical and logical network separation architecture and data localization/residency compliance for highly regulated industries.
Expertise and in-depth working knowledge and hands-on experience in cloud platforms (at least one of the following: AWS, Azure, GCP), and its corresponding security, data encryption, and networking architecture and technologies.
Cloud Infrastructure & Networking: Advanced understanding of IAM/RBAC, OAuth, identity governance (SCIM), TCP/IP, IP routing, DNS, proxies, and CSP private networking (NAT, Firewalls, TLS, PrivateLink).
Advanced Identity & AI Security: Practical exposure to modern security vectors, including AI Security principles and emerging non-human identity frameworks like Agentic Identity (securing AI agents, orchestrators, and LLM data pipelines).
Audit Lifecycle Management: Experience executing gap assessments, control implementations, evidence collection, and managing annual surveillance/reassessment cycles.
Ability to build out demos, configure CSP environments, and test use cases on the platform and relevant integrations with CSP services and external security tools.
Ability to create security and networking-related reference architectures, security best practices and hardening guides, and articulate them to a customer audience.
A demonstrated knowledge of security frameworks such as NIST, CIS, OWASP, MITRE ATT&CK and how to articulate controls and security mechanisms within a Risk Assessment centred approach.
Knowledge of ANSI SQL compliant databases and / or data warehousing is preferred
Excellent written and verbal communication skills, interpersonal and collaborative skills, presentation and white boarding skills to a large audience, and the ability to successfully communicate security and risk-related concepts to technical and nontechnical audiences.
Fair understanding of the culture diversity across Asia Pacific Japan region and flexibility of working with customers and colleagues from multiple APJ time zones.
Bachelor's degree in Information Security, Computer Science, Information Management Systems, or related field required. Masters preferred.
Proven CSAP Track Record: Direct, hands-on experience leading or supporting a successful CSAP certification framework (Low, Mid, or High tier)
K-FSI & Financial Sector Mastery: Direct experience navigating the K-FSI CSP Safety Evaluation process, demonstrating a deep understanding of vendor risk, outsourcing due diligence, and the Regulation on Supervision of Electronic Financial Transactions (RSEFT / 전자금융감독규정).
Data Privacy Mastery: Clear working knowledge of South Korean data privacy and cloud legislation, including Article 23-2 of the Cloud Computing Act, the Electronic Financial Transactions Act (EFTA), and the Personal Information Protection Act (PIPA).