HYUNDAI Infrastructure Security Expands Scope from Cloud to AI Security

Security for finished car manufacturers follows a different path than security for general IT companies. This is because they must go beyond simple data protection and take responsibility for the safety of the entire mobility service connected to the vehicle. This job introduction provided by HYUNDAI contains the role of cloud security infrastructure that supports global connected car services and the image of engineers responding to the changing security environment.

Jang Buk-min, who works as a public cloud security engineer at the Hyundai Motor Company Integrated Security Center, performs the role of establishing and operating security systems so that the cloud environments of Hyundai Motor Company and Kia can operate safely. The core task is to constantly detect and improve vulnerabilities in various public cloud environments such as AWS, GCP, and Azure. Recently, as AI services are being introduced to the cloud in large numbers, the scope of work is expanding into AI security.

National regulations and protection of core technologies are key

There are two main points where cloud security in the finished car industry differs from general IT companies. First is the connectivity of the service. HYUNDAI sells vehicles to countries all over the world and provides global connected car services. Accordingly, security standards must be established for each, considering the different service characteristics and regulations of each country. This is why a deep understanding of the mobility service itself is essential, beyond simple IT infrastructure security.

Second is the sensitivity of the data. The finished car industry often deals with information that has very high security levels, such as national core technologies. Therefore, they face the task of designing enhanced security standards and procedures that consider sensitive areas beyond general security levels. The Hyundai Motor Company Integrated Security Center is responsible for the security of the overall IT infrastructure, from on-premise servers and networks to the public cloud.

Building an 'automation system' for sustainable security

The task the security team is currently most focused on is making security activities a 'sustainable system.' They are focusing on advancing the management system so that the entire process, from security inspection to vulnerability remediation and subsequent verification, is linked as one process. Jang Buk-min stated that they are focusing on creating an automation system by establishing public cloud security governance so that any person in charge can respond quickly based on the same standards.

A security engineer's career has the characteristic of expanding in accordance with the changing technological environment. Jang Buk-min also joined through a vehicle security role and started a career with vehicle accident response work. Later, as the security organization expanded along with the global growth of the group companies, the scope of work was widened to IT security, and after undergoing threat incident response for the entire group, they grew into the current cloud security engineer.

As a necessary competency to respond to changing security threats, an 'attitude of not fearing new environments and domains' was cited. The explanation is that because security threats constantly change, it is important to have an attitude of steadily acquiring new knowledge without staying in one specific technology. A career path of building basic strength by experiencing various fields and then expanding into areas of interest is also a recommended direction.

Source: original video (YouTube)