The Staff Security Engineer will conduct hands-on penetration testing across web, mobile, API, and cloud-related environments supporting Coupang’s security activities and services in Taiwan. This role will identify and validate vulnerabilities, communicate technical impact, and provide actionable remediation guidance while working with the Korea security team. The staff engineer is expected to independently own penetration-testing engagements and provide technical guidance to fellow engineers.
The role will help maintain consistent security-testing delivery across complex applications, external services, and internal systems in a high-tempo, cross-regional environment.
What will you do?
- Lead or execute authorized penetration-testing engagements across web applications, mobile applications, APIs, and cloud-related attack surfaces.
- Define testing scope, identify attack surfaces, select appropriate testing methods, and document evidence, limitations, and outcomes.
- Assess discovered vulnerabilities, validate technical impact, distinguish verified findings from false positives, and provide remediation guidance.
- Use Linux, command-line utilities, and penetration-testing tools to perform controlled testing and verify results.
- Build or modify scripts that support request automation, test-data processing, or security-test result analysis.
- Coordinate testing scope, ownership boundaries, escalation paths, status updates, and deliverables with the Korea security team and Taiwan stakeholders.
- Independently manage engagement priorities and review testing output to identify gaps and provide specific technical guidance.