About
Inseok Jeon
For a security professional, the most important thing is the balance between technical and managerial security.
- Experience building and operating security across industries including OT, finance, and gaming
- Pursues a balance of theory (graduate school adjunct professor), technology (security monitoring and incident response), and management (security governance and certification)
- Author of 8 papers on information security (5 in KCI-indexed journals)
Experience
IBM Korea · IBM Security / Security Manager
Aug 2018 – Present
- Security lead PM for a global manufacturing client
- SOC (Security Operation Center) operation and enhancement
- OT security implementation, operation, and enhancement
- Enterprise security incident response planning; incident response and recovery
- Cloud and endpoint security operation; security assessments
- Vulnerability assessment and penetration testing
- Development and quality management of a remote SOC monitoring service model
- Establishment of cloud service security processes
- ISMS · PIMS · ISO 27001 certification support
Konkuk University, Graduate School of Information and Telecommunications · Adjunct Professor
Sep 2017 – Present
- Teaching master's and doctoral courses
- Cybersecurity Response Framework
- Cloud Security
- Network Security
- Recent Internet Hacking Cases and Analysis Techniques
AhnLab · CERT (Computer Emergency Response Team) / Senior Researcher
Sep 2009 – Aug 2018 (9 years)
- Intrusion detection and response (FW, IDS, IPS, WAF, DDoS)
- Network configuration and incident handling; dedicated outage response as operations shift lead
- VPN (L2L, IPSec, SSL) configuration and management
- PM and QM for remote security monitoring of 25+ large sites in the public, finance, gaming, and internet sectors
- Security monitoring framework consulting and incident response process design
- Security monitoring business proposals (RFP analysis, proposal writing, presentations)
- Team security officer: ISMS · PIMS · ISO 27001 certification support, internal network separation, asset management, vulnerability assessment, and internal audits
Dongin Safety Co., Ltd. · General Affairs Team / Assistant Manager
Apr 2006 – Sep 2009 (3 years 6 months)
- Personal information protection officer
- Established the privacy policy
- Designed and managed processes for collection, use, retention, provision, and disposal of personal information
- Delivered privacy training to employees
- Website development and maintenance
- In-house HR program development (VB)
- Audit support for the Ministry of Employment and Labor and Korea Workers' Compensation & Welfare Service
Education
- Korea University, Graduate School of Information Security — Ph.D. coursework completed (Information Security)
- Konkuk University, Graduate School of Information and Telecommunications — M.S. (Information Security)
- Thesis: Personal Information Protection Level Measurement Model Using ISMS
- B.S. (Multimedia)
Certifications
| Certification | Issuer |
|---|---|
| CISSP | ISC2 |
| CISA (Certified Information Systems Auditor) | ISACA |
| ISO 27001 Lead Auditor | IRCA |
| AWS Certified Cloud Practitioner | AWS |
Publications
- How to Cope with Ransomware in the Healthcare Industry · Journal of the Korea Institute of Information Security & Cryptology, Vol.28 No.1 (2018)
- Curriculum Development for Smart Factory Information Security Awareness Training · Journal of the Korea Institute of Information Security & Cryptology, Vol.26 No.5 (2016)
- Using the SIEM Software Vulnerability Detection Model Proposed · Journal of the Korea Institute of Information Security & Cryptology, Vol.25 No.4 (2015)
- Telemedicine Security Risk Evaluation Using Attack Tree · Journal of the Korea Institute of Information Security & Cryptology, Vol.25 No.4 (2015)
- A Study on Supply Chain Risk Management of Automotive · Journal of the Korea Institute of Information Security & Cryptology, Vol.25 No.4 (2015)
- Integrated Management of Development and Operations (DevOps) in a Non-Stop Environment Considering Security · Review of KIISC, Vol.25 No.1 (2015)
Activities
| Period | Activity |
|---|---|
| Apr 2022 – Dec 2023 | Expert member (Metaverse), Seoul Metropolitan Government IT New Technology Governance Group |
| Mar 2019 – Dec 2019 | Mentor, Hanium mentoring program |
| Sep 2015 – Mar 2018 | SecureHUB security pro bono (web vulnerability assessment and web shell detection for public organizations) |
| Jan 2014 – Jun 2023 | Secretary of the Steering Committee, Smart Medical Security Forum (standards drafting, talks) |
Talks · Seminars
- Speaker, Secure Korea 2017 Conference
- Speaker, Smart Healthcare Information Security Conference 2018 · 2019
- Online lectures: Personal Information Protection; Security Incident Cases and Security Monitoring Strategy
Contact
- Email: wilcois@naver.com
- GitHub: InseokJeon-Sec
Website Analytics Notice
This site uses Google Analytics 4 to understand visitor traffic.
| Item | Details |
|---|---|
| Data collected | Pages visited, visit time, referral source, browser and device type, approximate location (country, city) |
| Collection method | Google Analytics script and cookies |
| Purpose | Reviewing visitor statistics and improving content |
| Not collected | Information that directly identifies individuals, such as names or contact details |
- Collected data is reviewed only as aggregated statistics and is not used for any other purpose.
- You can opt out by blocking cookies in your browser or by using the Google Analytics Opt-out Browser Add-on.
- How Google processes data: Google Privacy Policy