4 days ago
Base Salary
$138k - $297k/yr
Responsibilities
- Design, deploy, and manage security controls for externally facing web and API services.
- Analyze and tune WAF detections, deploy security policies, reduce false positives and negatives, and respond to emerging vulnerabilities and CVEs.
- Detect and mitigate malicious bot activity and improve bot defense capabilities.
- Monitor, analyze, and optimize controls against DDoS attacks.
- Conduct proactive web threat hunting and improve preventive controls.
- Develop operational procedures, documentation, automation workflows, detection logic, playbooks, and response procedures.
- Analyze API security events and improve investigation and response workflows.
- Perform large-scale analysis of SIEM data, security telemetry, and web access logs to investigate incidents and produce security insights.
- Partner with engineering, infrastructure, and security teams on incident investigations and cross-functional security initiatives.
Requirements
- Bachelor’s degree in Computer Science or a related field, or equivalent practical experience.
- At least 4 years of experience in security engineering or cybersecurity.
- Experience analyzing security telemetry, access logs, and detection events and driving remediation.
- Hands-on experience securing large-scale web environments, including DNS, DDoS mitigation, web application attacks, bot management, vulnerability response, and security investigations.
- Experience with Web Security CDN, WAF, Bot Management, or DDoS protection platforms in production.
- Experience analyzing large datasets with SQL and security analytics platforms such as SIEM solutions, AWS Athena, Splunk, or Elastic.
- Programming or scripting experience with one or more languages such as Python, JavaScript, Go, or Bash.
- Experience investigating and responding to web security incidents in large-scale e-commerce, technology, or internet-facing environments.
- Understanding of web application security principles, common attack techniques, OWASP Top 10, and MITRE ATT&CK.
- Experience developing security automation, operational workflows, detection logic, playbooks, or response procedures.
- Strong communication, stakeholder management, collaboration, and data-driven security communication skills.
- Cybersecurity certifications such as CISSP, GIAC, GSEC, GCIH, GCIA, Security+, or equivalent are preferred.
- International travel capability and Korean language proficiency are preferred or advantageous.
Benefits
- Medical, dental, vision, life, AD&D, disability, FSA, HSA, and EAP benefits.
- 401(k) plan with company match.
- Paid time off, paid holidays, and paid parental leave.
- Pre-tax commuter benefits and free electric car charging station access.
- Annual bonus and other compensation may be available in addition to base salary.
Tech Stack
Categories
About Coupang
Coupang builds and operates a South Korea–focused e-commerce marketplace with an end-to-end logistics network (Rocket Delivery), plus food delivery, video streaming, and fintech under brands such as Coupang, Eats, and Play. Revenue comes from first-party retail, third-party marketplace services, advertising, and memberships (Rocket WOW). Founded in 2010, the company is headquartered in Seattle and is publicly listed on the NYSE (CPNG).