3 days ago
Seoul, Korea, SouthMid Level / Senior
Responsibilities
- Conduct penetration testing and vulnerability assessments of game services, web applications, APIs, back-office systems, and operational tools.
- Review authentication, authorization, payment, game-currency, and other critical business logic through scenario-based testing.
- Analyze major public vulnerabilities and proof-of-concept code, and assess their impact on internal services.
- Prepare assessment reports, recommend remediation priorities and improvements, collaborate with development teams on fixes, and perform retesting.
- Develop diagnostic tools and automate recurring assessment, analysis, and reporting tasks using LLMs and AI agents.
Requirements
- 4–8 years of practical experience in web/API penetration testing or vulnerability assessment.
- Understanding of web/API architecture and major security vulnerabilities, with the ability to perform manual assessments using Burp Suite or similar tools.
- Experience discovering authentication, authorization, or business-logic vulnerabilities and validating their real-world impact.
- Ability to write or modify assessment scripts and tools in Python or another programming language.
- Experience using LLM or AI tools for security assessments, explaining their effectiveness, and reproducing and validating results.
- No restrictions preventing overseas business travel.
- Preferred experience includes Android/iOS application security assessment and static/dynamic analysis, game-service account/payment/currency/reward logic assessment, source-code review, MSA/cloud-service security assessment, and security assessment of LLM/AI-agent services.
Benefits
- Full-time employment, subject to possible change based on negotiated employment terms.
- Work location is Yeoksam Centerfield.
- A 5-month probationary period applies, with no changes to employment type or salary during the period.
- Regular hiring process may close early once the position is filled.
About KRAFTON
KRAFTON is a Seoul-based, KRX-listed video game company that develops and publishes PC, console, and mobile titles. Its studios include PUBG Studios, Bluehole Studio, Striking Distance Studios, and Unknown Worlds, best known for the PUBG: Battlegrounds franchise (and PUBG Mobile with Tencent) and games like Subnautica and TERA. The company monetizes through premium sales and live-service content across global markets.