21 days ago
Seoul, Korea, SouthStaff+
Responsibilities
- Design and maintain data lineage from vendor logs through normalization, field mapping, detection rules, SIEM use cases, and MITRE ATT&CK mappings.
- Develop and improve detection-mapping engines that connect vendor rules, log schemas, and security use cases.
- Analyze detection coverage and gaps, reduce redundant or obsolete detections, and recommend prioritized rule improvements.
- Build adapters and pipelines to collect, normalize, correlate, and validate data from EDR, CSPM, WAF, SIEM, Identity Protection, and SaaS Security platforms.
- Implement interactive graph visualizations of relationships among security solutions, log sources, rules, use cases, and ATT&CK techniques.
- Develop AI-agent infrastructure, validation features, and security-platform API integrations for automated analysis.
- Analyze BAS results and continuously validate whether detection changes improve actual threat-detection rates.
- Lead the CTEM lifecycle across scoping, discovery, prioritization, validation, and mobilization.
Requirements
- At least 8 years of cybersecurity experience and at least 2 years developing security platforms or tools, including internal security tools, detection platforms, or security data pipelines.
- Deep practical experience in detection engineering, security-log analysis, SIEM operations, or a related field.
- Experience integrating multiple security solutions such as EDR, CSPM, WAF, SIEM, and Identity Protection.
- Proficiency in Python backend development, automation, and security-tool development.
- Experience with database schema design, basic migrations, SQL, and data-lake platforms for large-scale security-log analysis.
- Experience integrating security-solution APIs through REST API, GraphQL, or vendor SDKs.
- English communication skills sufficient for global collaboration and technical-document comprehension, plus Korean proficiency for domestic-team collaboration.
- Preferred qualifications include BAS experience, AI-agent infrastructure, workflow automation or orchestration, security-data pipelines, log-normalization frameworks, TypeScript/JavaScript, graph visualization, and security research or public technical presentations.
Tech Stack
Categories
Data EngineeringSecurity
About Coupang
Coupang builds and operates a South Korea–focused e-commerce marketplace with an end-to-end logistics network (Rocket Delivery), plus food delivery, video streaming, and fintech under brands such as Coupang, Eats, and Play. Revenue comes from first-party retail, third-party marketplace services, advertising, and memberships (Rocket WOW). Founded in 2010, the company is headquartered in Seattle and is publicly listed on the NYSE (CPNG).