Toss

Security Engineer [산업기능요원/전문연구요원]

AWS Azure Cloud IAM Intune +12 skills

Build and operate security infrastructure (firewalls, IAM, Zero Trust) to protect Toss’s fintech services and employee systems while ensuring compliance with financial regulations.

Security Engineer(보안 분석 플랫폼 운영)

AWS Elasticsearch ELT ETL Hadoop +7 skills

Security Engineer in the Security Purple Team, responsible for designing, building, and operating SIEM (Splunk, Opensearch, Elasticsearch) and log pipelines (NIFI, KAFKA, Hadoop) across On-Prem, AWS, and K8S environments, focusing on log collection, analysis, and automation.

Security Researcher (모의해킹/취약점 분석)

Perform penetration testing and vulnerability analysis on Toss’s web and mobile apps to find and fix security flaws before attackers do.

Reverse Engineering

Security Researcher (모바일보안)

Android CI/CD C++ Cryptography DevSecOps +11 skills

Build and integrate automated mobile-app security tools (anti-tampering, obfuscation, crypto, SAST/DAST) into CI/CD to harden Toss’s Android and iOS apps.

Security Researcher [산업기능요원/전문연구요원]

Performs penetration testing and vulnerability assessments on Toss’s financial services (web/mobile), researches new attack methods, and improves security for infrastructure and DevOps environments.

DevOps

Security Researcher (APT/인프라 모의해킹)

DevOps Docker Git Gradle Grafana +10 skills

A Security Researcher performs simulated hacking (APT attacks) and infrastructure diagnostics to proactively identify and mitigate vulnerabilities across Toss’s financial systems, collaborating closely with engineering teams to enhance security while balancing usability.

Security Researcher

Open 99d APAC

AI AWS Bash Cissp Cloud +6 skills

Performs regular and ad-hoc security assessments, penetration testing, and vulnerability analysis for a digital bank’s infrastructure, systems, and applications using Python, Django, and cloud-native tools.

Information Security Manager (Global)

Open 99d APAC

Oversee global information security policies, compliance, and risk management for a fintech company expanding into new markets, ensuring regulatory adherence and secure operations across jurisdictions.

Gdpr

Security Engineer (네트워크 보안)

Open 44d APAC

Network security engineer on Toss's Security Infrastructure team in Seoul, building and operating the controls that protect Toss's services and employees: network segmentation for financial compliance, access control, and visibility/detection systems. Core work spans network security solutions (firewall, DDoS, IDS/IPS, WAF, SASE, ZTNA, VPN) plus automation and AI-based detection.

AI SaaS Sase VPN WAF

IT Security Specialist

Open 21d APAC

IT support role on Toss Securities' IT Innovation Team in Seoul: the specialist sets up and manages employee IT assets (PCs, monitors, IP phones), handles account and permission administration for onboarding/offboarding, and resolves day-to-day IT issues so colleagues can work smoothly. Key tech includes Windows/macOS and SaaS tools like Google Workspace, Slack, Notion, and Jira; this is a 1-year

Jira Notion SaaS Slack

Security Engineer (보안 인프라)

Open 19d APAC

AI AWS Azure CSPM GCP +8 skills

Security Engineer on Toss Securities' infrastructure security team, designing and operating security across hybrid on-prem and multi-cloud (AWS/Azure/GCP) environments: network security controls, Kubernetes microsegmentation, Zero Trust/SSE/ZTNA enforcement, and large-scale endpoint security, automated with Terraform, Python/Go, and eBPF-based tooling.