[Security] Information Security Inspection - Containers and Kubernetes Security

Who we are

We are responsible for identifying security risks and misconfigurations across infrastructure environments and for establishing and advancing security frameworks for container- and cloud-based infrastructure. We collaborate closely with infrastructure operations teams and leverage deep expertise in operating systems, infrastructure, and cloud environments to enhance overall security posture.

Responsibilities

In this role, you will ensure the integrity and stability of infrastructure environments, including container-native systems, while protecting them from both internal and external threats. You will perform key security activities such as container image vulnerability management, Kubernetes cluster access control, runtime monitoring, and network policy configuration, while also establishing and operating security policies across CI/CD pipelines.

■ Container/Kubernetes Security Policy Management

• Establishing and advancing security policies for Kubernetes and Container environments based on global standards (NIST, CIS, ISO 27001)
• Applying and managing security policies across internal PaaS platforms and Kubernetes-native systems
• Building and operating security governance frameworks for container orchestration environments

■ Infrastructure Vulnerability Management (Including Container-Native Environments)

• Performing vulnerability assessment of OS, Web, WAS, and DB in on-premise and cloud environments (based on CVE/CCE)
• Utilizing KSPM tools for security configuration assessment and vulnerability management in Kubernetes/container environments
• Applying security guidelines based on global standards such as CIS Benchmark and NIST

■ Server Access Control & Authentication Security Enhancement

• Strengthening and managing privileged access control processes for key infrastructure resources, including servers, network devices, and databases
• Managing and operating server authentication security through session logging, command
• Control, multi-factor authentication (MFA), and access approval processes

■ Container Architecture Security Review

• Reviewing the security of container-based service architectures

Minimum Qualifications

• Bachelor's degree or higher in Computer Science, Information Security, or a related field
• Minimum 5 years of experience in container-native service operations and security, including at least 3 years in security roles
• Experience in security automation development and operational optimization
• Strong understanding and hands-on experience with container technologies such as Kubernetes and Docker
• Strong communication skills with developers and infrastructure teams

Preferred Qualifications

• Proficiency in English (fluent in both written and oral business communication)
• Relevant certifications in container and security domains (e.g., CKA, CKS, KCSA)
• Experience with security tools such as Twistlock, Aqua, and Falco
• Experience with DevSecOps tools (e.g., OPA, Kyverno)
• Experience with DevOps collaboration tools (e.g., Jira, Confluence, Dooray)

Others

[Notes]

• In accordance with the employment protection laws, eligible candidates (disabled individuals, veterans, etc.) will receive preferential benefits during the process.
• Applications are accepted only through the Hyundai Motor Company career page, and any other methods are not allowed.
• Submitting your applications early prior to the deadline is recommended to prevent mass traffic and submission issues.
• Additional assignments may be given during the interview rounds, if necessary.
• The recruitment schedule may be adjusted depending on the progress of the recruitment process.
• The expected position level specified in the job description may change based on each individual's experience and evaluation results.
• For any inquiries on recruitment, please refer to the [FAQs] or submit a ticket through '1:1 Inquiries' on our webpage.

[Precautions]

• If any of the following conditions apply, your acceptance may be revoked, or you may be subject to disadvantages in the selection process:
• If the information submitted during the recruitment process (including the application form) differs or cannot be proven in documentation
• If you are ineligible to work under company regulations
• If you are ineligible to travel abroad (for men, Korean nationals who have not completed military service or are not exempt from military service by the joining date)
• If you are unable to join the company on the start date designated by the company upon receiving the final offer
• Our company respects the trade secrets of third parties and strives to comply with relevant laws and regulations, such as The Unfair Competition Prevention and Trade Secret Protection Act. Please be careful not to disclose any confidential information related to your former/current workplace or to violate the confidentiality obligation of your former/current workplace, during the recruitment process. Violation may result in disadvantage in the recruitment process.

Position: Manager, Senior Manager