쿠팡
Senior Security Engineer, Penetration Tester
채용 상세
<p> </p> <div>Coupang is reimagining the shopping experience with the goal of wowing each customer from the instant they open the Coupang app to the moment an order is delivered to their door. Our services in Taiwan include “Rocket Delivery” which offers next-day delivery for a wide selection of items at affordable prices, “Rocket Overseas” which offers free international delivery on millions of best-selling products from Korea, <span class="___1cs5bdp f1w7gpdv f5p0z4x">the</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">U.S.,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">beyond.</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">We</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">are</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">looking</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">for</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">talents</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">to</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">help</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">us</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">lead</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">Coupang’s</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">expansion</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">in</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">Taiwan.</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">This</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">is</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">an</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">exceptional</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">opportunity</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">to</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">become</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">a</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">part</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">of</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">Coupang’s</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">growth</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">in</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">Taiwan</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">create</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">a</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">world</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">where</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">our</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">customers</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">wonder,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">“How</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">did</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">I</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">ever</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">live</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">without</span> <span class="___xxxjie0 f1w7gpdv f1gqqdtu">Coupang?”</span></div> <div> </div> <div> <div class="paragraph-in-scc-markdown-text ___1ngh792 ftgm304 f1iaxwol"><strong>Position: Senior Security Engineer, Penetration Tester</strong></div> <div class="paragraph-in-scc-markdown-text ___1ngh792 ftgm304 f1iaxwol"> </div> <div class="paragraph-in-scc-markdown-text ___1ngh792 ftgm304 f1iaxwol">The Security Engineer will conduct hands-on penetration testing across web, mobile, API, and cloud-related environments supporting Coupang’s security activities and services in Taiwan. The engineer will identify and validate vulnerabilities, communicate their technical impact, and provide actionable remediation guidance while collaborating with the Korea security team. This L5 role is intended for a developing penetration tester who can execute defined testing activities with appropriate scope, guidance, and technical support. The role will contribute to consistent security-testing delivery across complex applications, external services, and internal systems.</div> <h4>What will you do?</h4> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Execute authorized penetration tests across web applications, mobile applications, APIs, and cloud-related attack surfaces within an agreed scope.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Identify attack surfaces, apply appropriate testing methods, and produce clear supporting evidence for validated findings.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Assess vulnerabilities, distinguish verified findings from false positives, and provide actionable remediation guidance.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Use Linux, command-line utilities, and penetration-testing tools to complete controlled testing tasks and validate results.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Build or modify scripts that support request automation, test-data processing, or analysis of security-testing results.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Coordinate testing status, blockers, findings, and next steps with the Korea security team and Taiwan stakeholders.</li> </ul> <h4>Basic Qualifications</h4> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Demonstrated hands-on penetration-testing capability across web, mobile, or API environments.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Demonstrated ability to use penetration-testing tools in Linux or command-line environments.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Ability to assess vulnerabilities, explain supporting evidence and impact, and provide actionable remediation guidance.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Programming or scripting capability that supports security testing.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Offensive-security experience sufficient to execute defined penetration-testing activities with appropriate support.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Fluency in both Mandarin Chinese and English, able to communicate security findings and remediation guidance in English and Mandarin Chinese.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Ability to collaborate across Taiwan and Korea security activities, including scope coordination, responsibility boundaries, escalation, and delivery communication.</li> </ul> <h4>Preferred Qualifications</h4> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Experience completing scoped penetration-testing activities with clearly defined support, requirements, and testing boundaries.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Experience responding constructively to technical direction, review feedback, and newly identified testing requirements.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Experience testing multiple applications, external services, or internal applications through penetration testing or legally authorized bug-bounty work.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Experience in e-commerce, banking, web services, or other complex application environments.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Exposure to cloud-security testing, including architecture, identity and access, public interfaces, or configuration risks.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Red Team or adversary-simulation exposure.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">A degree in Computer Science, Computer Engineering, or a related field.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">An offensive-security certification such as OSCP, OSCE, OSED, CREST, or SANS.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Ability to demonstrate an authorized penetration-testing case covering scope, methodology, evidence, findings, limitations, and delivery outcome.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Ability to complete a controlled attack-surface analysis and testing plan for a multi-interface application.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Ability to compare remediation options based on risk reduction, constraints, and validation approach.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Ability to prepare concise bilingual security summaries for technical and cross-regional stakeholders.</li> </ul> <p><strong>Recruitment Process</strong></p> <ul> <li> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview - Offer</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Interview schedules and results will be communicated to the applicant through the email address submitted at the application stage.</li> </ul> </li> </ul> <p><strong>Details to Consider</strong></p> <ul> <li> <ul> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">This job posting may be closed before the stated application end date if all openings are filled.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.</li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf">Those eligible for employment protection, including recipients of veterans’ benefits and persons with disabilities, may receive preferential treatment in accordance with applicable laws.</li> </ul> </li> </ul> <div class="paragraph-in-scc-markdown-text ___1ngh792 ftgm304 f1iaxwol"><strong>Privacy Notice</strong></div> <div class="paragraph-in-scc-markdown-text ___1ngh792 ftgm304 f1iaxwol">Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below:<br><a href="https://www.coupang.jobs/privacy-policy/">https://www.coupang.jobs/privacy-policy/</a></div> </div>