[About StudioXID]
StudioXID is the team behind ProtoPie, an interactive prototyping tool built to make interaction easier and more powerful.
With ProtoPie, designers can turn their UI/UX ideas into production-like, highly interactive prototypes for mobile, desktop, web, and beyond—without writing code. We focus on intuitive concepts and flexible interaction design so teams can experiment, validate ideas, and communicate more clearly as they build digital products.
ProtoPie is trusted by designers at leading global companies, including Google, Microsoft, Meta, BMW, Samsung, Bytedance, Reddit, Volkswagen, Mercedes-Benz, OpenAI, Apple, and Disney.
We believe great digital products start with great interaction.
Here, you’ll join a global community of makers, designers, and problem-solvers building the future of interactive prototyping with ProtoPie.
StudioXID는 인터랙션을 더 쉽고 강력하게 만드는 프로토타이핑 툴, ProtoPie를 만드는 팀입니다.
ProtoPie는 코딩 없이도 모바일, 데스크톱, 웹 등 다양한 환경에서 실제와 가까운 고도화된 인터랙티브 프로토타입을 제작할 수 있습니다. 직관적인 개념 모델과 유연한 인터랙션 디자인을 통해, 디지털 제품을 만드는 과정에서 아이디어를 실험, 검증하고 소통하는 과정을 더 명확하게 만드는 데 힘쓰고 있습니다.
Google, Microsoft, Meta, BMW, Samsung, Bytedance, Reddit, Volkswagen, Mercedes-Benz, OpenAI, Apple, Disney 등 전 세계 유수 기업의 디자이너들이 실무에서 ProtoPie를 사용하고 있습니다.
StudioXID는 뛰어난 디지털 제품은 뛰어난 인터랙션에서 시작된다고 믿습니다.
우리는 전 세계의 메이커(maker), 디자이너, 문제 해결자들과 함께 인터랙티브 프로토타이핑의 미래를 만들어갑니다.
ProtoPie is the easiest interactive prototyping tool for all digital products. Designers can turn their UI/UX design ideas into highly interactive prototypes for mobile, desktop, web, all the way to IoT. They can explore, validate, and test design solutions and ideas by creating very realistic, production-like prototypes without code and with the help of engineers.
ProtoPie is widely used by various companies all over the world across industries, e.g., Google, Microsoft, Meta, Nintendo, BMW, Samsung, Tencent, Reddit, Bytedance, and Disney, and ProtoPie won no.1 Advanced Prototyping tool in the 2022 Design Tools Survey.
We are looking for Head of IT & Security to join our team in managing and improving ProtoPie’s company-wide security posture. In this hands-on role, you will work alongside our team to oversee everything from internal IT software and assets (macOS) to securing our cloud production infrastructure and product code. You will play a key role in leading your team, maintaining and expanding our certifications - such as ISO 27001, ISO 27701, and TISAX, while ensuring that security is integrated into our business processes and company culture. Additionally, you will help provide technical assurance to our global enterprise clients, demonstrating that our security standards meet their strict requirements for protecting prototyping data.
Key Objectives:
-
Workplace IT & Identity Management: Collaborate on establishing a secure internal environment by managing our software ecosystem, macOS fleet, and centralized identity and access systems.
-
Customer Trust & Technical Assurance: Act as the technical ambassador to our global enterprise clients, successfully demonstrating our security posture to ensure they can confidently use our platform.
-
Infrastructure & Network Security: Work with the team to harden cloud environments (AWS/GCP). Collaborate with our SREs and backend engineers to manage network security design, firewalls, monitoring, permissions & authentication, and encryption, to ensure a robust architecture for our production services.
-
Security Operations & Monitoring: Build proactive detection and response capabilities through comprehensive monitoring, automated log analysis, and robust secret management.
-
Product Security & Testing: Help coordinate security testing for our products. This includes testing the security of new features, managing internal/external penetration tests, overseeing vulnerability disclosures, and supporting the engineering team with security & privacy.
-
Internal Governance & Process: Lead documenting security processes and policies. Secure the human side of the business by hardening internal workflows, leading company-wide security awareness, and maintaining our global compliance certifications.
-
Identity & Assets: Configure and maintain Okta, GWS, Iru (MDM), and other company-wide tools. Manage OS security (e.g. SentinelOne), software distribution, and SSO integrations for all team members.
-
Cloud & Network Hardening: Manage AWS/GCP security configurations, including WAF rules, Network Security Groups, DNS/DMARC, encryption, and IAM permissions.
-
Customer Engagement: Complete security questionnaires and lead technical calls with enterprise security teams to resolve concerns and provide evidence of our compliance.
-
Detection & Tooling: Optimize security tooling such as AWS GuardDuty and Inspector. Improve our SIEM visibility, manage tokens/secrets, and leverage automation or AI for log processing and incident detection.
-
Security Testing: Test the security of new product features using tools such as Burp Suite, coordinate third-party penetration tests and oversee that engineers mitigate the findings, manage the vulnerability disclosure process, assist developers with privacy & security-related topics, and arrange secure coding training for our developers.
-
Audits & Internal Process: Gather technical evidence for ISO 27001/27701, TISAX, and GDPR audits. Review internal business processes for security gaps and conduct organization-wide security awareness training.
-
7+ years of experience in an IT, cybersecurity, pentesting, infrastructure/DevOps, backend, or other suitable technical role with a connection to security.
-
Track record of team leading and member mentoring skills
-
Verbal/written communication skills in both English and Korean.
-
Bachelor’s degree or equivalent professional experience in IT/security.
-
Strong general technical skills with an affinity for IT/security solutions and the ability to quickly pick up new tools.
-
Strong fundamental understanding of the core concepts that drive security.
-
Capacity to embrace change and quickly adapt to new situations or changes in direction.
-
Ability to work in a self-directed environment that is highly collaborative and cross-functional.
-
Professional experience at SaaS companies.
-
Strong Plus: Experience with securing or managing cloud production infrastructure with modern tools such as Kubernetes, Docker, related CI/CD integrations (e.g., GitHub), and token management.
-
Experience with any of our core stack: AWS, GCP, Kandji or other MDM solutions, Okta, Google Workspace, SentinelOne, and SIEM solutions.
-
Experience or affinity with coding (e.g., TypeScript/JS, HTML, Python). Coding experience is not strictly required, but it helps with understanding potential product security issues.
-
Experience applying AI in a secure way to automate repetitive processes without increasing risk.
-
Familiarity with AppSec topics (OWASP Top 10) or penetration testing.
-
Any experience with security certifications and audits (SOC2, ISO 27001, TISAX, GDPR).
-
Experience in senior stakeholder management and working across various parts of an organization.
Team ProtoPie Works with 5 Company Values
We respect everyone's autonomy while taking responsibility for freedom and for judgment between right and wrong for the company.
We share information, communicate transparently, and build trust with our colleagues and customers.
We draw a line between personal and professional lives and work with high moral standards.
We respect each cultural trait and always consider the global market in work.
We collaborate with colleagues, help others actively, and respect others' professionalism and authority.
1. Welcome Awards
For new joiners, we support KRW 1,000,000 for buying personal peripherals and items for better work efficiency.
-
Desk, Chair, Tablet PC, Mobile, Smartwatch, etc.
2. Education Benefits
We believe that members’ growth and happiness lead to the team’s growth. We support members in buying books and taking classes they want: language, instrument, anything you want to learn.
3. Healthcare Benefits
We understand that our people can bring their best selves to work when they and their families are taken care of.
-
Medical check-ups, Gym, Physical activities, Vision care, Medical treatment(pets included)
4. Internet & Communication Benefits
We support internet and mobile expenses to enrich our remote working environment.
5. Congratulations & Condolences
We support members’ life events both in joy and in sorrow.
-
Flexible working hours (Generally from 10 AM to 7 PM KST in HQ).
-
Full-time position (during the first 3 months—the probation period, the employee will receive 100% of their salary).
-
HQ: 34, Bongeunsa-ro 16-gil, Gangnam-gu, Seoul, Republic of Korea.
-
Submit resume or CV > 1st Interview (in-person) > 2nd Interview (in-person) > decision and negotiation.
-
The interview process may be slightly changed depending on the position.
-
Employment will be terminated if you are found to have falsified information on your resume and portfolio.
StudioXID is dedicated to cultivating a diverse and inclusive workplace. We highly value diversity in our workforce and do not discriminate in our hiring or promotion practices based on race, religion, color, national origin, gender, gender identity or expression, sexual orientation, age, marital status, veteran status, disability, pregnancy (including breastfeeding), parental status, or any other characteristic protected by law.
As a global company, English proficiency is required for all roles to ensure smooth communication and collaboration across our international teams, unless otherwise stated in the job postings.
If you have any questions, please feel free to reach us at [email protected]
