1 month ago
Seoul, Korea, SouthStaff+
Responsibilities
- Build and maintain a comprehensive view of mobile threats, attack paths, and systemic control gaps.
- Define the target mobile security posture, priorities, standards, and long-term roadmap for iOS and Android.
- Provide security architecture guidance covering app integrity, device trust, authentication, credential protection, local data, WebViews, deep links, networking, and third-party SDKs.
- Build and run a repeatable mobile application security assessment and review program, including methodology, prioritization, acceptance criteria, escalation, automation, and measurement.
- Identify recurring weaknesses and drive reusable platform-level controls, standards, and engineering frameworks.
- Influence senior engineering leaders and mobile teams across organizational boundaries without formal authority.
- Establish the mobile security operating model and help build and manage a specialist mobile security team over time.
Requirements
- Deep hands-on mobile security expertise across both iOS and Android, ideally in a large-scale consumer technology environment.
- Practical experience with mobile application security, reverse engineering, app integrity, device trust, authentication, secure storage, IPC, WebViews, deep links, networking, and abuse resistance.
- Experience building or operating a mobile security assessment or review program rather than only conducting individual reviews.
- Strong software engineering experience, ideally including production mobile development or mobile security tooling.
- Demonstrated ability to identify systemic issues across multiple applications and translate them into reusable controls, standards, or engineering frameworks.
- Experience influencing senior engineers and engineering leaders across organizational boundaries.
- Experience with product security architecture and threat modeling at significant scale.
- Evidence of driving changes in engineering practices, not only identifying security issues.
- Prior people management is useful but not required; strong technical leadership and potential to grow into management are emphasized.
Benefits
- Full-time regular employment position.
- Includes a 12-week probation period, which may be skipped, shortened, or extended based on business needs.
Tech Stack
iOS
Categories
About Coupang
Coupang builds and operates a South Korea–focused e-commerce marketplace with an end-to-end logistics network (Rocket Delivery), plus food delivery, video streaming, and fintech under brands such as Coupang, Eats, and Play. Revenue comes from first-party retail, third-party marketplace services, advertising, and memberships (Rocket WOW). Founded in 2010, the company is headquartered in Seattle and is publicly listed on the NYSE (CPNG).