Staff Security Engineer (Insider Threat)

Company Introduction:

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar commerce industry. We are one of the fastest-growing retail companies that established an unparalleled reputation for being a leading and reliable force in the commerce industry. 

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. At Coupang, every day is filled with the excitement of building, you will see yourself, your colleagues, your team, and the company grow every day.   

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and challenge traditional tradeoffs. Join Coupang now to create an epic impact in this always-on, high-tech, and hyper-connected world. 

Role Overview:
As an Insider Threat and Data Governance Analyst you will be responsible for building and operating a new program that combines our existing global Data Loss Prevention function with a proactive approach to Data Governance leveraging modern toolsets around data identification, classification, and retention enforcement across all possible data sources from endpoint to cloud.

This is a new function being created to address the unique challenges of the eCommerce space of a global company. You will need a proven track record of building successful programs, inspiring and developing teams, with the ability to work across levels and organizations with autonomy. You will be the company’s subject matter expert that has expert working knowledge in Insider Threat, IR, investigation and hunt techniques, root-cause security issues, quickly assessing the potential threats, and educating other members of the broader team.

What You Will Do:

• Operate an Insider Threat program that spans multiple geographies and cultures
• Operate and contribute to the maturity in building a robust DSPM program which provides complete visibility into the data lifecycle of the company
• Operate and improve data classification and tagging solutions that covers all aspects of structured and unstructured data on prem and in the cloud.
• Work with various governments and regulatory authorities in response to activities
• Ensure retention schedule enforcement through technical means
• Partner with internal and external organizations to build a comprehensive data flow mapping
• Investigate the root cause of incidents and collaborate with stakeholders to implement effective remediation measure, ensuring the issue does not recur
• Enhance governance processes while considering organization-wide processes and requirements to strengthen the company’s overall security posture
• Ensure successful and timely delivery of results by providing technical leadership to a project

Essential Qualifications

• 6+ years of experience in information security with at least 3+ years of Forensic and Insider Threat experience
• Experience of Host based security investigation (Windows, Linux, Network/Security appliances)
• Experience of managing large scale Insider Threat programs
• Experience of analyzing security event from endpoint security solutions (EDR, HIPS, Anti-Virus, DLP, etc.)
• Experience of analyzing security event from application (Web application, Mobile app, Email security, etc.)
• Experience of analyzing security event and knowledge of AWS or Cloud environment
• Experience implementing and managing DSPM programs
• Experience with forensic toolsets
• Experience in Automation and Scripting using Bash, Python, PowerShell
• Experience working in a fast-paced international enterprise
• Fluent in Mandarin
• Bachelor’s degree or equivalent practical experience

Preferred Qualifications:

• Has one of the following certificates such as CISSP, CSPM and GCIH
• Fluent in Korean and Mandarin

Recruitment Process

• Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer
• The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
• Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.

Details to Consider

• This job posting may be closed prior to the stated end date for application if all openings are filled.
• Coupang has the right to rescind an offer of employment if a candidate is found to have

submitted false information as part of the application process.

• Coupang does not discriminate against disabled applicants or those with veteran status.
• We are proud to offer equal opportunities for all applicants.

Privacy Notice

• Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice is located below. https://privacy.coupang.com/en/land/jobs/