Insider Threat Counter Operations (ITCO) Engineer

About the role

We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did we ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we’re collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.

We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.

Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs.

The Insider Threat Counter Operations (ITCO) is the Coupang Red team for insider risk security, proactively probing our controls and processes and generating actionable insights to drive high impact enterprise improvements for insider risk resilience. We are seeking a deeply technical ITCO Engineer to lead offensive simulation campaigns from our Seattle office.

Responsibilities

• Ideate, design, and execute realistic, high impact insider threat simulation campaigns with trending, risk-based attack vectors for sensitive data exfiltration, privilege abuse, and system sabotage.
• Design and execute integrity testing of technical controls for IT Security, Information Security, DLP, IAM, and legal hold.
• Develop and enhance custom tooling, existing techniques, and automated frameworks to scale simulation capabilities and optimize ITCO testing infrastructure.
• Produce high impact reports that translate tactical findings into actionable insights to drive enterprise security program strategy and process improvements.

Requirements

• Bachelor’s Degree in Computer Science or a related field
• 6 years of experience in Security Engineering or Cybersecurity

Qualifications

• 7+ years in offensive operations, digital forensics, red teaming, penetration testing, or insider threat engineering.
• Knowledge and experience with investigation of insider threat incidents and in-depth understanding of insider threat mindset and behavior patterns.
• Knowledge and experience working within Data Privacy, Identity Access Management (IAM), Privileged Access Management (PAM), and core information security control frameworks.
• Capable of emulating an “insider threat” mindset and passionate about building a high impact simulation program.
• Hands-on development/scripting skills to create automation, expand and enhance existing tools and techniques, and evaluate and onboard new tools.
• Experience operating within large-scale e-commerce or high-growth tech environments.
• Familiarity with South Korean data security regulations, compliance standards, and legal frameworks.
• Fluent in English and native Korean proficiency.

Pay

The base pay for this position ranges from $142,000/year to $309,000/year. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills and experience.

Benefits

• Annual bonus is 0-20% of the base salary
• Medical/Dental/Vision/Life, AD&D insurance
• Flexible Spending Accounts (FSA) & Health Savings Account (HSA)
• Long-term/Short-term Disability
• Employee Assistance Program (EAP) program
• 401K Plan with Company Match
• 18-21 days of Paid Time Off (PTO) a year based on the tenure
• 12 Paid Holidays
• Paid Parental leave
• Pre-tax commuter benefits
• MTV – Free Electric Car Charging Station