Donggyu Woo

-

• Adoption and operation of security solutions (such as SIEM, IDS, and WAF)
• Development of threat detection rule using SIEM (Splunk)
• Development and operation of API Gateway servers based on the DRF(Django REST framework) for SOAR(Security Orchestration, Automation and Response)
• Building and operating TIP(Threat Intelligence Platform) using MISP(Malware Information Sharing Platform)
• Building and operating FIM(File Integrity Monitoring) system using Fleet and Osquery
• Response of security incident

• Development of detection rule based Snort related with vulnerability/malware analysis
• Operation of IDS/IPS, Next-Generation Firewall solutions
• Response of security incident