Job description

Company Introduction We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce. We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day. Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world. Role Overview The Detection Engineering (DE) team within Coupang’s Digital Trust organization designs and operates end-to-end security threat detection and response automation systems. Our mission is to build an AI-powered Security Operations Center (AI-SOC) that enables faster, more accurate, and scalable security operations through intelligent automation. Working under a Detection-as-Code philosophy, we manage the entire detection lifecycle, including threat scenario development, log collection, detection engineering, automated response orchestration, and AI-driven threat analysis. As part of the Automation Engineering pillar, this role is responsible for designing, developing, and operating automated workflows that analyze, investigate, and respond to security threats at scale. The team builds and maintains integrations across a broad range of security platforms, develops AI Agent and LLM-based analysis capabilities for automated triage and investigation, and ensures the reliability, scalability, and operational excellence of critical security automation systems in production. This position offers the opportunity to shape the future of AI-driven security operations by building the technologies that power Coupang’s next-generation AI-SOC platform. What You Will Do Design and develop normalization, enrichment, and automated triage workflows to analyze and process security detection events at scale. Design, develop, and operate SOAR workflows that streamline and automate security operations processes. Build and maintain integrations with security platforms and external services, including SIEM, EDR, CTI, ticketing systems, and SaaS/API-based solutions. Develop and enhance the AI-SOC framework by creating LLM-based triage and analysis logic, confidence scoring mechanisms, and automated response orchestration capabilities. Drive operational excellence by managing incident response for SOAR and automation systems, operating logging and monitoring infrastructure, and improving system reliability. Design and implement automated response scenarios based on detection use cases while collaborating closely with SOC and Incident Response teams. Analyze and optimize automation workflows by identifying performance bottlenecks and driving continuous improvements in efficiency, scalability, and effectiveness. Basic Qualifications 5+ years of professional software engineering experience with strong proficiency in Python development, including modular design, code quality, exception handling, and testing Experience designing, implementing, and improving security event processing, detection, and response workflows through software engineering Hands-on experience with security technologies such as SIEM, EDR, SOAR, and CTI platforms, including customization, integration, and operational support Experience developing integrations using RESTful APIs, Webhooks, and JSON-based data processing Experience designing, building, and operating systems in cloud environments, preferably AWS Strong problem-solving skills with the ability to diagnose, troubleshoot, and resolve complex system incidents Experience with Git-based software development workflows and CI/CD pipeline practices Preferred Qualifications Experience designing, developing, or operating AI-SOC platforms or LLM-powered security automation solutions Experience building applications using LLM agent and workflow frameworks such as LangChain, LlamaIndex, or similar technologies Experience operating large-scale SOAR or workflow automation platforms with multiple production automation workflows Experience working with Kubernetes and EKS environments in production Experience extending or developing custom capabilities for security automation platforms Strong understanding of SIEM detection logic and security event lifecycle management Experience operating log processing pipelines, message queues, and related distributed infrastructure Experience building security operations dashboards and analytics solutions using data visualization tools Pay & Benefits Our compensation reflects the cost of living across several US geographic markets. At Coupang, your base pay is one part of your total compensation. The base pay for this position ranges from $152,000/year in our lowest geographic market to $169,000/year in our highest geographic market. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills, and experience. General Description of All Benefits Medical/Dental/Vision/Life, AD&D insurance Flexible Spending Accounts (FSA) & Health Savings Account (HSA) Long-term/Short-term Disability Employee Assistance Program (EAP) program 401K Plan with Company Match 18-21 days of the Paid Time Off (PTO) a year based on the tenure 12 Paid Holidays Paid Parental leave Pre-tax commuter benefits MTV - [Free] Electric Car Charging Station General Description of Other Compensation “Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary range or wage scale. Recruitment Process Application Review - Application Review - Job Fit Interview - Focus Interview – Offer The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances. Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage. Details to Consider This job posting may be closed prior to the stated end date for application if all openings are filled. Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process. Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws. Privacy Notice Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: coupang.jobs Coupang is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, or gender (including pregnancy, gender identity, gender expression, sexual orientation, transgender status), national origin, age, disability, medical condition, HIV/AIDS or Hepatitis C status, marital status, military or veteran status, use of a trained dog guide or service animal, political activities, or affiliations, citizenship, or any other characteristic or class protected by the laws or regulations in the locations where we operate. If you need assistance and/or reasonable accommodation in the recruiting process due to a disability, please contact us at usrecruiting@coupang.com . Job Requisition ID: R0079379

Requirements

Must-haves

Company Introduction
Design and develop normalization, enrichment, and automated triage workflows to analyze and process security detection events at scale.
Design, develop, and operate SOAR workflows that streamline and automate security operations processes.
Build and maintain integrations with security platforms and external services, including SIEM, EDR, CTI, ticketing systems, and SaaS/API-based solutions.
Develop and enhance the AI-SOC framework by creating LLM-based triage and analysis logic, confidence scoring mechanisms, and automated response orchestration capabilities.
Drive operational excellence by managing incident response for SOAR and automation systems, operating logging and monitoring infrastructure, and improving system reliability.
Design and implement automated response scenarios based on detection use cases while collaborating closely with SOC and Incident Response teams.
Analyze and optimize automation workflows by identifying performance bottlenecks and driving continuous improvements in efficiency, scalability, and effectiveness.
5+ years of professional software engineering experience with strong proficiency in Python development, including modular design, code quality, exception handling, and testing
Experience designing, implementing, and improving security event processing, detection, and response workflows through software engineering
Hands-on experience with security technologies such as SIEM, EDR, SOAR, and CTI platforms, including customization, integration, and operational support
Experience developing integrations using RESTful APIs, Webhooks, and JSON-based data processing

Nice-to-haves

Experience designing, developing, or operating AI-SOC platforms or LLM-powered security automation solutions
Experience building applications using LLM agent and workflow frameworks such as LangChain, LlamaIndex, or similar technologies
Experience operating large-scale SOAR or workflow automation platforms with multiple production automation workflows
Experience working with Kubernetes and EKS environments in production
Experience extending or developing custom capabilities for security automation platforms
Strong understanding of SIEM detection logic and security event lifecycle management
Experience operating log processing pipelines, message queues, and related distributed infrastructure
Experience building security operations dashboards and analytics solutions using data visualization tools
Pay & Benefits
General Description of All Benefits
Medical/Dental/Vision/Life, AD&D insurance
Flexible Spending Accounts (FSA) & Health Savings Account (HSA)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aillmapipythonawsci/cdkubernetes

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Pto

Paid Time Off

Parental Leave