3 months ago
Seoul, Korea, SouthSenior / Staff+
Responsibilities
- Continuously monitor, identify, and map externally exposed IT assets and digital footprints, including domains, IP addresses, open ports, and cloud environments.
- Discover shadow IT, abandoned servers, test pages, and unnecessary exposed interfaces outside managed organizational visibility.
- Identify exposed vulnerability information and develop risk-based mitigation strategies and remediation priorities.
- Collaborate with infrastructure and development teams to remove or protect vulnerable attack surfaces before exploitation.
- Implement and operate commercial attack surface management solutions.
- Build and use custom attack surface discovery tools.
- Automate attack surface identification processes and integrate them with security solutions.
- Develop scanners, scripts, and AWS- and Python-based API integrations for security automation.
Requirements
- At least five years of professional experience identifying, responding to, assessing, or managing cybersecurity threats.
- At least two years of attack surface management experience is preferred.
- Experience implementing and operating commercial attack surface management solutions.
- Experience developing scanners or scripts from an attacker perspective.
- Ability to use AWS resources and Python to build API integrations and attack surface identification tools.
- Understanding of cloud environments such as AWS, Azure, and GCP, as well as on-premises infrastructure, IoT, user endpoints, DNS, and administrative consoles.
- Understanding of TCP/IP, DNS, HTTP/S, RDP, and web and cloud architecture security.
- Understanding of practical attack mechanisms including attack-path discovery, vulnerability exploitation, malware distribution and execution, lateral movement, DDoS, and supply-chain attacks.
- Preferred experience includes large-scale public cloud security assessment, bug bounty participation, CVE discovery and reporting, penetration testing, incident response, threat hunting and detection, security solution operations, security architecture reviews, or cyber threat intelligence.
- Experience working in complex and extensive IT infrastructure environments is preferred.
- English communication ability in a global environment is preferred.
Benefits
- Opportunity to join a global security team at a rapidly growing e-commerce company.
- Opportunity to help lead proactive defense against advanced cyber threats.
- Opportunities for continued learning and growth in attack surface management and cybersecurity.
Tech Stack
Categories
About Coupang
Coupang builds and operates a South Korea–focused e-commerce marketplace with an end-to-end logistics network (Rocket Delivery), plus food delivery, video streaming, and fintech under brands such as Coupang, Eats, and Play. Revenue comes from first-party retail, third-party marketplace services, advertising, and memberships (Rocket WOW). Founded in 2010, the company is headquartered in Seattle and is publicly listed on the NYSE (CPNG).