Job description

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce. We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world. Role Overview Coupang’s Cyber Threat Intelligence team is part of GHOST within Proactive Security under the Digital Trust organization. GHOST stands for Global Hunting, Oversight, and Strategic Triage. The organization proactively identifies and analyzes cyber threats that may affect Coupang and turns its findings into meaningful security actions. The Cyber Threat Intelligence team collects and analyzes information from a wide range of sources, including open sources, commercial intelligence services, the dark web, and security telemetry. The team tracks threat actors and campaigns and identifies and responds to threats that may affect Coupang, including phishing, fraud, brand and executive impersonation, exposed data and credentials, malicious infrastructure, and high-risk vulnerabilities. This position will primarily focus on intelligence activities that protect Coupang executives. You will continuously monitor digital exposure, impersonation, personal information exposure, phishing, social engineering, and other online threats affecting executives. You will turn analytical findings into actionable intelligence that supports timely protective measures and informed decision-making. The focus of this position is intelligence-led executive protection rather than physical close protection. However, because information discovered in the digital environment may indicate potential risks to physical safety, you will work closely with Corporate Security, Legal, Privacy, Investigations, and other relevant teams. Executive protection will be the primary focus of this position. Depending on team priorities and the candidate’s expertise, the role may also contribute to other Cyber Threat Intelligence responsibilities, including Fraud Intelligence, Digital Risk Protection, and third-party and supply chain threat intelligence. This position is being hired at the Staff level and requires at least eight years of professional experience in a relevant security field. We are looking for someone who can independently lead significant and sensitive threat investigations, coordinate response and program improvements across organizations, and translate intelligence into executive decisions and meaningful protective actions. What You Will Do Executive Digital Exposure Monitoring: Monitor executive-related digital exposure across authorized sources, including the open web, social media, professional networking platforms, data leak sites, the deep web, and the dark web. Distinguish legitimate online activity from potential risk and identify exposures that require further action. Executive Impersonation Detection and Response: Detect and analyze social media and professional networking profiles, email accounts, domains, websites, messages, images, audio, video, and other synthetic media that impersonate executives. Assess the intent and potential impact of the impersonation and coordinate blocking, notification, takedown, and follow-up actions with relevant teams. Personal Information and Credential Exposure Response: Monitor for external exposure of sensitive executive information, including contact details, addresses, account information, credentials, schedules, or location-related information. Assess the accuracy and risk of exposed information and work with relevant teams and external service providers to support removal, takedown, account protection, and other protective actions. Protective Intelligence and Threat Assessment: Investigate phishing, social engineering, Business Email Compromise, malicious disclosure of personal information, harassment, threatening references, and indicators of cyber or physical targeting involving executives. Assess source credibility, threat actor intent and capability, likelihood, and potential impact, and recommend an appropriate response or escalation level. Response Coordination and Case Management: When an executive-related threat is identified, promptly share intelligence and coordinate response activities with Corporate Security, Legal, Privacy, Investigations, Incident Response, and other relevant teams. Document investigative evidence and response actions and track progress and residual risk until the case is closed. Executive CTI Reporting: Provide executives and relevant leadership with clear and concise reports and briefings on their individual threat environment, significant cyber threats, impersonation and personal information exposure, and risks requiring immediate attention. Communicate complex threat information in a form that non-technical audiences can understand and act upon. Travel and Geopolitical Intelligence Support: As needed, analyze geopolitical conditions, civil unrest, crime, terrorism, cyber threats, and other security risks related to executive travel or major events and provide relevant teams with intelligence briefings. Support for Adjacent CTI Responsibilities: Based on team priorities and operational needs, support other Cyber Threat Intelligence activities such as Fraud Intelligence, Digital Risk Protection, third-party and supply chain threat intelligence, phishing and brand protection, and data exposure investigations. Tools, Automation, and AI: Use CTI and Executive Protection platforms, search tools, data analysis technologies, and AI-powered tools to improve the efficiency and accuracy of monitoring, classification, enrichment, investigation, and reporting. Validate AI-generated outputs against original sources and additional investigation. Global Collaboration: Work effectively with security teams, executive support organizations, engineering teams, business stakeholders, external CTI providers, and takedown service providers across the United States, Korea, and other regions to mitigate threats affecting executives and Coupang. Basic Qualifications Bachelors Degree in Computer Science or a related field 4 years of experience in Security Engineering or Cybersecurity Preferred Qualifications At least eight years of professional experience in Cyber Threat Intelligence, Digital Risk Protection, Executive Protection, security monitoring, threat research, Fraud Intelligence, brand protection, incident response, security investigations, or another relevant security discipline Ability to lead or actively participate in meetings, prepare clear written reports and executive briefings, and clearly explain investigative findings and risk judgments to executives and global stakeholders Intermediate-level Korean proficiency, with the ability to communicate and collaborate with Korea-based colleagues in routine work conversations, written messages, and meetings Ability to investigate open sources, commercial intelligence, social media, the dark web, and other information sources and assess the credibility and limitations of collected information Basic understanding of digital threats such as impersonation, phishing, social engineering, personal information and credential exposure, account takeover, and online fraud Ability to assess the credibility, urgency, and potential impact of a threat based on incomplete or conflicting information and recommend an appropriate response or escalation path Ability to translate complex investigative findings into clear and concise reports that executives, leadership, and non-technical stakeholders can understand and act upon Ability to systematically manage time-sensitive threat cases and coordinate response activities involving multiple internal and external stakeholders Ability to handle personal information and sensitive investigative information with a high degree of confidentiality and discretion Ability to maintain professionalism, sound judgment, and composure when communicating directly with executives and senior leadership Professional-level Korean proficiency, with the ability to participate effectively in Korean-language meetings, prepare written business communications, and clearly explain security findings and judgments Experience in Executive Protection, Protective Intelligence, or Digital Risk Protection, including investigating executive impersonation, personal information exposure, phishing, malicious domains, and other online threats and pursuing takedowns or information removal Experience investigating open sources, social media, data leak sites, the deep web, and the dark web and operating commercial CTI, Digital Risk Protection, or Executive Protection platforms Experience assessing geopolitical and security risks affecting travel destinations, producing Travel Risk or Protective Intelligence reports, and collaborating with Corporate Security, Legal, Privacy, Investigations, or Crisis Management teams Experience in Fraud Intelligence, brand protection, third-party risk, or supply chain threat intelligence Experience leading significant and sensitive threat investigations or response efforts involving multiple countries and organizations and influencing executive and security leadership decisions and complex risk mitigation efforts Experience designing and advancing scalable Executive Protection, Digital Risk Protection, or CTI programs that define protected populations, monitoring scope, threat classifications, risk ratings, escalation criteria, and response procedures Experience developing long-term strategies for Executive Protection, Digital Risk Protection, CTI capabilities, or external intelligence partnerships and mentoring analysts or providing technical leadership Pay & Benefits Our compensation reflects the cost of living across several US geographic markets. At Coupang, your base pay is one part of your total compensation. The base pay for this position ranges from $138,000/year to $297,000/year. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience. General Description of All Benefits Annual bonus is 0-20% of the base salary Medical/Dental/Vision/Life, AD&D insurance Flexible Spending Accounts (FSA) & Health Savings Account (HAS) Long-term/Short-term Disability Employee Assistance Program (EAP) program 401K Plan with Company Match 18-21 days of Paid Time Off (PTO) a year based on the tenure 12 Paid Holidays Paid Parental leave Pre-tax commuter benefits MTV- [Free] Electric Car Charging Station General Description of Other Compensation “Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary or wage scale. Recruitment Process and Others Recruitment Process We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce. We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world. Role Overview This role mitigates security threats by continuously identifying IT interfaces and digital footprints exposed to attackers. As attackers' infiltration methods evolve rapidly with advancements in AI technology, proactive attack surface management is no longer an option , but a necessity. We are looking for an expert to join us in achieving our proactive cybersecurity mission to minimize attack surface exposure, staying one step ahead of the attackers. What You Will Do Continuous Monitoring of Digital Footprint: Constantly identify and map our officially/unofficially exposed IT assets (domains, IPs, open ports, cloud environments, etc.). Discovery of Shadow IT & Blind Spots: Proactively detect abandoned servers, test pages, and unnecessary exposed interfaces that are out of the management organization's visibility. Vulnerability Identification & Mitigation Strategy: Identify vulnerable application versions and paths exposing internal information, evaluate them based on business impact, and prioritize remediation efforts. Cross-functional Collaboration & Proactive Defense: Work closely with infrastructure and development teams to swiftly eliminate vulnerable paths or apply protective measures before an attack surface leads to a real breach. ASM Solution Implementation & Operation: Implement and operate commercial ASM solutions while simultaneously building and utilizing our own in-house Attack Surface Discovery tools. ASM Automation Pipeline: Automate processes to streamline attack surface identification and establish integration architectures with existing security solutions. Basic Qualifications Bachelors Degree in Computer Science or a related field 2 years of experience in Security Engineering or Cybersecurity Preferred Qualifications 5+ years of hands-on experience in cybersecurity threat identification, response, assessment, and management (with at least 2 years of experience in Attack Surface Management preferred). Technical Skills: ASM Solution Utilization: Experience in implementing and operating commercial ASM solutions. Scanner & Script Development: Experience developing vulnerability scanners or detection scripts from an attacker's perspective (Offensive perspective). Usage of AI IDEs is highly welcomed. Security Automation: Ability to efficiently write automation scripts utilizing AWS resources and Python for API integration and building attack surface identification tools. Security Knowledge: Security Architecture Understanding: Structural understanding of Cloud (AWS, Azure, GCP), On-premises, IoT, User Endpoints, DNS, Admin Consoles, etc. Network & Cloud Security: In-depth knowledge of major network protocols (TCP/IP, DNS, HTTP/S, RDP, etc.) and web/cloud architecture security. Cyber Attack Mechanisms (TTPs): Understanding of real-world attack mechanisms including attack path discovery, vulnerability exploitation, malware distribution/execution, lateral movement, DDoS, and supply chain attacks. Language Proficiency: Intermediate or higher proficiency in English (Reading, Writing, Speaking) to communicate smoothly in a global environment. Cloud Security Expertise: Understanding of infrastructure operations and security assessment experience in large-scale public cloud environments (AWS, Azure, GCP, etc.). Related Security Experience: Hands-on experience in Bug Bounty programs, discovering and reporting major vulnerabilities (CVEs), penetration testing, incident response, threat hunting, security architecture review, or Cyber Threat Intelligence (CTI). Large-Scale Infrastructure Experience: Security operations experience within a complex, massive global IT infrastructure. Bilingual Proficiency: Fluent in both Korean and English, capable of seamless communication and collaboration in a global work environment. Pay & Benefits Our compensation reflects the cost of living across several US geographic markets. At Coupang, your base pay is one part of your total compensation. The base pay for this position ranges from $108,000/year to $232,000/year. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience. General Description of All Benefits Annual bonus is 0-20% of the base salary Medical/Dental/Vision/Life, AD&D insurance Flexible Spending Accounts (FSA) & Health Savings Account (HAS) Long-term/Short-term Disability Employee Assistance Program (EAP) program 401K Plan with Company Match 18-21 days of Paid Time Off (PTO) a year based on the tenure 12 Paid Holidays Paid Parental leave Pre-tax commuter benefits MTV- [Free] Electric Car Charging Station General Description of Other Compensation “Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary or wage scale. Recruitment Process and Others Recruitment Process Application Review - Job Fit Interview - Focus Interview – Offer The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances. Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage. Details to Consider This job posting may be closed prior to the stated end date for application if all openings are filled. Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process. Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants. Privacy Notice Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: coupang.jobs C oupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or gender (including pregnancy, gender identity, gender expression, sexual orientation, transgender status), national origin, age, disability, medical condition, HIV/AIDS or Hepatitis C status, marital status, military or veteran status, use of a trained dog guide or service animal, political activities, or affiliations, citizenship, or any other characteristic or class protected by the laws or regulations in the locations where we operate. If you need assistance and/or reasonable accommodation in the recruiting process due to a disability, please contact us at usrecruiting@coupang.com. Job Requisition ID : R0078654 The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances. Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage. Details to Consider This job posting may be closed prior to the stated end date for application if all openings are filled. Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process. Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants. Privacy Notice Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: coupang.jobs C oupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or gender (including pregnancy, gender identity, gender expression, sexual orientation, transgender status), national origin, age, disability, medical condition, HIV/AIDS or Hepatitis C status, marital status, military or veteran status, use of a trained dog guide or service animal, political activities, or affiliations, citizenship, or any other characteristic or class protected by the laws or regulations in the locations where we operate. If you need assistance and/or reasonable accommodation in the recruiting process due to a disability, please contact us at usrecruiting@coupang.com. Job Requisition ID : R0078766

Requirements

Must-haves

Bachelors Degree in Computer Science or a related field
4 years of experience in Security Engineering or Cybersecurity
Continuous Monitoring of Digital Footprint: Constantly identify and map our officially/unofficially exposed IT assets (domains, IPs, open ports, cloud environments, etc.).
Discovery of Shadow IT & Blind Spots: Proactively detect abandoned servers, test pages, and unnecessary exposed interfaces that are out of the management organization's visibility.
Vulnerability Identification & Mitigation Strategy: Identify vulnerable application versions and paths exposing internal information, evaluate them based on business impact, and prioritize remediation efforts.
ASM Solution Implementation & Operation: Implement and operate commercial ASM solutions while simultaneously building and utilizing our own in-house Attack Surface Discovery tools.
ASM Automation Pipeline: Automate processes to streamline attack surface identification and establish integration architectures with existing security solutions.
Bachelors Degree in Computer Science or a related field
2 years of experience in Security Engineering or Cybersecurity

Nice-to-haves

Ability to lead or actively participate in meetings, prepare clear written reports and executive briefings, and clearly explain investigative findings and risk judgments to executives and global stakeholders
Intermediate-level Korean proficiency, with the ability to communicate and collaborate with Korea-based colleagues in routine work conversations, written messages, and meetings
Ability to investigate open sources, commercial intelligence, social media, the dark web, and other information sources and assess the credibility and limitations of collected information
Basic understanding of digital threats such as impersonation, phishing, social engineering, personal information and credential exposure, account takeover, and online fraud
Ability to assess the credibility, urgency, and potential impact of a threat based on incomplete or conflicting information and recommend an appropriate response or escalation path
Ability to translate complex investigative findings into clear and concise reports that executives, leadership, and non-technical stakeholders can understand and act upon
Ability to systematically manage time-sensitive threat cases and coordinate response activities involving multiple internal and external stakeholders
Ability to handle personal information and sensitive investigative information with a high degree of confidentiality and discretion
Ability to maintain professionalism, sound judgment, and composure when communicating directly with executives and senior leadership
Professional-level Korean proficiency, with the ability to participate effectively in Korean-language meetings, prepare written business communications, and clearly explain security findings and judgments
Experience investigating open sources, social media, data leak sites, the deep web, and the dark web and operating commercial CTI, Digital Risk Protection, or Executive Protection platforms
Experience in Fraud Intelligence, brand protection, third-party risk, or supply chain threat intelligence

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawspythonapiazuregcp

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto

Paid Time Off

Parental Leave