Keep wondering

I may not be the world’s No. 1 hacker, but I am here to apply security that actually makes a difference.

I’m a passionate security professional in the financial industry with a knack for solving the puzzles behind vulnerabilities.

My daily mission involves collaborating with developers to remediate infrastructure risks and ensuring our services are built on a foundation of solid security principles. From initial design negotiations to meeting high-stakes certification standards, I’m constantly exploring how to make security a seamless part of the business workflow.

This blog is a record of my technical explorations and my commitment to becoming a global security expert—one deep dive at a time.

I’m working in Korean securities company

Main Job

• New service security review (Security deliberation / Development security / Security assessment)
• Vulnerability analysis and evaluation of electronic financial infrastructure, responding to certification audits such as ISMS-P
• Performing vulnerability analysis and penetration testing

Sub Job

• Source code and open source security operation and management (SCA, OSS)
• Infrastructure security management (On-premise, in-house virtualization, cloud services)
• Responding to vulnerability-related issues and vulnerability management
• Managing thematic inspections