21 days ago
Seoul, Korea, SouthStaff+
Responsibilities
- Lead security initiatives to protect critical assets and data and continuously improve the organization’s security posture.
- Act as a security subject-matter expert across the software development lifecycle and promote secure-by-design practices.
- Develop and maintain security-focused libraries, tools, and automation scripts to enforce security standards across services.
- Collaborate with engineering and platform teams on secure code, API, and infrastructure design and participate in code reviews.
- Define, document, and enforce security policies, standards, and procedures with software, platform, and Infosec teams.
- Perform threat modeling for new and existing applications and evaluate, recommend, and adopt security and governance tools.
- Lead penetration testing and vulnerability assessments.
- Lead security incident response, including detailed analysis and forensic investigations.
- Mentor engineers and drive the adoption of security best practices across the organization.
Requirements
- Bachelor’s or master’s degree in computer science, information security, or a related field, or equivalent practical experience.
- Strong software engineering skills and experience building secure applications and services.
- Ability to write, review, and optimize security-conscious code using secure coding patterns, input validation, and encryption.
- Deep understanding of cryptography, PKI, secure authentication protocols, and authentication and authorization in microservices environments.
- Expertise in network security, including firewalls, VPNs, WAFs, and microsegmentation.
- Experience integrating security guardrails and tools into software design, coding activities, and CI/CD pipelines.
- Experience securing services operated on AWS, Azure, and GCP.
- Proficiency in at least one scripting language, such as Python or Bash, and one general-purpose programming language, such as Go or Java.
- Strong documentation and communication skills, including the ability to explain complex security risks to technical and nontechnical audiences.
- Ability to lead projects and manage priorities.
- Preferred qualifications include contributions to open-source security tools or frameworks, professional English communication skills, and AWS Certified Security – Specialty or an equivalent Azure/GCP certification.
Benefits
- All interviews are conducted remotely.
- The hiring process consists of application review, first interview, second technical interview, leadership interview, and final decision.
- The posting may close early once recruitment is completed.
About Coupang
Coupang builds and operates a South Korea–focused e-commerce marketplace with an end-to-end logistics network (Rocket Delivery), plus food delivery, video streaming, and fintech under brands such as Coupang, Eats, and Play. Revenue comes from first-party retail, third-party marketplace services, advertising, and memberships (Rocket WOW). Founded in 2010, the company is headquartered in Seattle and is publicly listed on the NYSE (CPNG).