3 months ago
Responsibilities
- Lead security initiatives and continuously improve protection for critical assets and data against evolving threats.
- Act as a security subject-matter expert across all stages of the software development lifecycle.
- Develop and maintain security-focused libraries, tools, and automation scripts that enforce security standards across services.
- Partner with engineering teams to implement secure-by-design principles in code, APIs, and infrastructure.
- Participate in code reviews focused on identifying and remediating security vulnerabilities.
- Define and apply security policies, standards, and procedures with software, platform engineering, and Coupang Infosec teams.
- Drive adoption of security best practices through hands-on implementation and mentoring.
- Perform security threat modeling for new and existing applications.
- Evaluate, recommend, and implement security and governance tools.
- Lead penetration testing and vulnerability assessments.
- Serve as a lead responder to security incidents, including detailed analysis and forensic investigations.
Requirements
- Bachelor’s or master’s degree in computer science, information security, or a related field, or equivalent practical experience.
- Strong software engineering skills and experience building secure applications and services.
- Ability to write, review, and optimize security-conscious code, including secure coding patterns, input validation, and encryption.
- Deep understanding of cryptography, PKI, secure authentication protocols, and authentication/authorization in microservices environments.
- Expertise in network security, including firewalls, VPNs, WAFs, and micro-segmentation.
- Experience integrating security guardrails and tools into design, coding workflows, and CI/CD pipelines.
- Experience securing services operating on major cloud providers including AWS, Azure, or GCP.
- Proficiency in at least one scripting language, Python or Bash, and one general-purpose programming language, Go or Node.js.
- Strong documentation and communication skills, including the ability to explain complex security risks to technical and nontechnical audiences.
- Strength in project leadership and prioritization.
- Preferred experience with production and security for video streaming and related data systems.
- Preferred application security experience for consumer devices such as smart TVs and mobile applications, including DRM integration, anti-tampering, and device authentication.
- Open-source security tool or framework contributions are preferred.
- Professional English speaking and writing ability is preferred.
- AWS Certified Security – Specialty or an equivalent Azure/GCP certification is preferred.
Benefits
- All interviews are conducted remotely.
- The recruitment process may close early once hiring is complete.
About Coupang
Coupang is a technology and Fortune 150 company listed on the New York Stock Exchange (NYSE: CPNG) that provides retail, restaurant delivery, video streaming, and fintech services to customers around the world under brands that include Coupang, Eats, Play, Rocket Now, and Farfetch.