Job description

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce. We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world. Role Overview The Detection Operations team is responsible for protecting Coupang's global attack surface across web, network, email, and endpoint security. We operate and manage a broad range of security technologies, including enterprise security appliances, endpoint protection platforms, and cloud-based SaaS security services. Our mission is to detect, investigate, and mitigate cyber threats before they impact the business. By combining proactive threat detection, rapid response, and in-depth root cause analysis, we help minimize security risks while continuously improving our overall security posture and preventing future incidents. Why Join Detection Operations? At Coupang, security operates at massive scale. As a member of the Detection Operations team, you will have the opportunity to work across multiple security domains, including: Web Security Network Security Email Security Endpoint Security Rather than being confined to a single technology or security domain, you will gain hands-on experience with a diverse set of security solutions and services that protect one of the largest e-commerce and technology platforms in the world. You will work closely with experienced security engineers and subject matter experts across multiple disciplines, providing unique opportunities to expand both your technical depth and breadth. Team members are encouraged to take ownership, drive improvements, and contribute directly to strengthening Coupang's security capabilities. What You Will Do Design, deploy, and manage security controls that protect externally facing web and API services from a wide range of cyber threats using industry-leading security platforms and services. Analyze and tune Web Application Firewall (WAF) detections to reduce false positives and false negatives, improve security coverage, deploy security policies, and respond to emerging vulnerabilities and CVEs. Detect and mitigate automated and malicious bot activity, continuously improving detection logic, policy effectiveness, and overall bot defense capabilities. Strengthen detection and mitigation capabilities against Distributed Denial-of-Service (DDoS) attacks through continuous monitoring, analysis, and policy optimization. Conduct proactive web threat hunting activities to identify emerging attack patterns, strengthen detection capabilities, and improve preventive controls. Develop and maintain operational procedures, documentation, and automation workflows to increase efficiency and scalability across security operations. Analyze API security events and continuously improve detection, investigation, and response workflows to enhance API security posture. Perform large-scale analysis of SIEM, security telemetry, and web access logs to identify trends, investigate incidents, and provide actionable security insights through reports and metrics. Partner with engineering, infrastructure, and security teams to investigate security incidents, improve operational processes, and drive cross-functional security initiatives. Create and maintain monitoring use cases, detection logic, playbooks, and response procedures to improve security visibility and response effectiveness. Basic Qualifications Bachelors Degree in Computer Science or a related field 4 years of experience in Security Engineering or Cybersecurity Preferred Qualifications Proven ability to analyze security telemetry, access logs, and detection events to identify root causes, troubleshoot complex issues, and drive effective remediation. Strong communication and stakeholder management skills, with the ability to influence decisions, build alignment, and communicate security risks and recommendations through data-driven insights. Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience. Hands-on experience securing large-scale web environments, including DNS, DDoS mitigation, web application attacks, bot management, vulnerability response, and security event investigations. 10+ years of experience in Web Security, Security Operations, Threat Detection, Incident Response, or a related cybersecurity discipline. Ability to travel internationally as required, with no restrictions on obtaining and maintaining necessary travel documentation. Industry-recognized cybersecurity certifications such as CISSP, GIAC, GSEC, GCIH, GCIA, Security+, or equivalent. Hands-on experience with Web Security CDN, WAF, Bot Management, or DDoS protection platforms in production environments. Experience analyzing large datasets using SQL and security analytics platforms such as SIEM solutions, AWS Athena, Splunk, Elastic, or similar technologies. Proficiency in one or more programming or scripting languages such as Python, JavaScript, Go, or Bash for automation and security engineering. Experience investigating and responding to web security incidents within large-scale e-commerce, technology, or internet-facing environments. Strong understanding of web application security principles, common attack techniques, and industry frameworks such as OWASP Top 10 and MITRE ATT&CK. Experience developing security automation, operational workflows, detection logic, playbooks, or response procedures. Excellent written and verbal communication skills with the ability to effectively collaborate across engineering, infrastructure, product, and security teams. Korean language proficiency is a plus but not required. Pay & Benefits Our compensation reflects the cost of living across several US geographic markets. At Coupang, your base pay is one part of your total compensation. The base pay for this position ranges from $138,000/year to $297,000/year. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience. General Description of All Benefits Annual bonus is 0-20% of the base salary Medical/Dental/Vision/Life, AD&D insurance Flexible Spending Accounts (FSA) & Health Savings Account (HAS) Long-term/Short-term Disability Employee Assistance Program (EAP) program 401K Plan with Company Match 18-21 days of Paid Time Off (PTO) a year based on the tenure 12 Paid Holidays Paid Parental leave Pre-tax commuter benefits MTV- [Free] Electric Car Charging Station General Description of Other Compensation “Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary or wage scale. Recruitment Process and Others Recruitment Process Application Review - Job Fit Interview - Focus Interview – Offer The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances. Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage. Details to Consider This job posting may be closed prior to the stated end date for application if all openings are filled. Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process. Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants. Privacy Notice Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: coupang.jobs C oupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or gender (including pregnancy, gender identity, gender expression, sexual orientation, transgender status), national origin, age, disability, medical condition, HIV/AIDS or Hepatitis C status, marital status, military or veteran status, use of a trained dog guide or service animal, political activities, or affiliations, citizenship, or any other characteristic or class protected by the laws or regulations in the locations where we operate. If you need assistance and/or reasonable accommodation in the recruiting process due to a disability, please contact us at usrecruiting@coupang.com. Job Requisition ID : R0079421

Requirements

Must-haves

Why Join Detection Operations?
At Coupang, security operates at massive scale. As a member of the Detection Operations team, you will have the opportunity to work across multiple security domains, including:
Web Security
Network Security
Email Security
Endpoint Security
Design, deploy, and manage security controls that protect externally facing web and API services from a wide range of cyber threats using industry-leading security platforms and services.
Analyze and tune Web Application Firewall (WAF) detections to reduce false positives and false negatives, improve security coverage, deploy security policies, and respond to emerging vulnerabilities and CVEs.
Detect and mitigate automated and malicious bot activity, continuously improving detection logic, policy effectiveness, and overall bot defense capabilities.
Strengthen detection and mitigation capabilities against Distributed Denial-of-Service (DDoS) attacks through continuous monitoring, analysis, and policy optimization.
Conduct proactive web threat hunting activities to identify emerging attack patterns, strengthen detection capabilities, and improve preventive controls.
Develop and maintain operational procedures, documentation, and automation workflows to increase efficiency and scalability across security operations.

Nice-to-haves

Proven ability to analyze security telemetry, access logs, and detection events to identify root causes, troubleshoot complex issues, and drive effective remediation.
Strong communication and stakeholder management skills, with the ability to influence decisions, build alignment, and communicate security risks and recommendations through data-driven insights.
Bachelor's degree in Computer Science, Cybersecurity, Information Security, or a related field, or equivalent practical experience.
Hands-on experience securing large-scale web environments, including DNS, DDoS mitigation, web application attacks, bot management, vulnerability response, and security event investigations.
Industry-recognized cybersecurity certifications such as CISSP, GIAC, GSEC, GCIH, GCIA, Security+, or equivalent.
Hands-on experience with Web Security CDN, WAF, Bot Management, or DDoS protection platforms in production environments.
Experience analyzing large datasets using SQL and security analytics platforms such as SIEM solutions, AWS Athena, Splunk, Elastic, or similar technologies.
Proficiency in one or more programming or scripting languages such as Python, JavaScript, Go, or Bash for automation and security engineering.
Experience investigating and responding to web security incidents within large-scale e-commerce, technology, or internet-facing environments.
Strong understanding of web application security principles, common attack techniques, and industry frameworks such as OWASP Top 10 and MITRE ATT&CK.
Experience developing security automation, operational workflows, detection logic, playbooks, or response procedures.
Excellent written and verbal communication skills with the ability to effectively collaborate across engineering, infrastructure, product, and security teams.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

apisqlawspythonjavascriptgo

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto

Paid Time Off

Parental Leave