24 days ago
Seoul, Korea, SouthSenior
Responsibilities
- Define threat detection use cases and systematically manage detection coverage using threat intelligence, business context, and threat frameworks.
- Analyze network, operating system, application, cloud, and authentication logs and implement detection logic in SIEM environments.
- Test and validate detections before and after deployment through true-positive/false-positive analysis and tuning.
- Design and implement detection and monitoring requirements for privacy, financial security, and other regulatory compliance initiatives.
- Expand detection capabilities for account takeover, insider threats, unauthorized access, and other advanced threats.
- Use AI and LLM technologies to improve detection analysis, build use-case knowledge bases, and analyze large-scale log patterns.
- Collaborate with Red Team, Threat Intelligence, Incident Response, and Security Architecture teams to validate scenarios and improve detection accuracy.
- Document the creation, modification, retirement, and change history of detection rules.
- Participate in major company projects, including security architecture changes and new service launches, to improve security visibility.
Requirements
- At least 5 years of information security experience, including at least 2 years of detection engineering or security analysis experience.
- Technical understanding of networks, operating systems, applications, security solutions, and how threats appear and are recorded across infrastructure layers.
- Practical understanding of security threat trends, attack techniques, defense technologies, and malware.
- Experience writing detection queries and developing rules in SIEM environments using technologies such as SQL, Python, or SPL.
- Experience analyzing diverse security logs, including EDR, network, cloud, and authentication logs.
- Understanding and practical experience with threat modeling or detection coverage frameworks such as MITRE ATT&CK, STRIDE, or an internal threat taxonomy.
- Understanding of security log structures and threat models in cloud environments such as AWS.
- Ability to clearly communicate detection design intent and results through documentation and communication.
- Preferred experience managing detection rules as code in a Detection-as-Code environment and deploying them through CI/CD pipelines.
- Preferred experience using Python for security data analysis, detection prototyping, or automation scripting.
- Preferred experience applying AI/LLMs to security analysis, threat hunting, hypothesis-driven detection development, Red/Purple Team exercises, insider-threat detection, large-scale transaction security, or regulatory monitoring design.
Benefits
- Permanent full-time employment with a 12-week probationary period, which may be waived, shortened, or extended when business needs require.
- Work location is Coupang’s Seoul Guui office.
- Hiring process consists of application review, two video technical interviews, and a final decision.
- Eligible veterans and people with disabilities may receive hiring preference under applicable law.
About Coupang
Coupang builds and operates a South Korea–focused e-commerce marketplace with an end-to-end logistics network (Rocket Delivery), plus food delivery, video streaming, and fintech under brands such as Coupang, Eats, and Play. Revenue comes from first-party retail, third-party marketplace services, advertising, and memberships (Rocket WOW). Founded in 2010, the company is headquartered in Seattle and is publicly listed on the NYSE (CPNG).