Insider Threat Counter Operations (ITCO) Engineer

Coupang•Seattle, WA

10d•$142,000 - $309,000•Onsite

About The Position

The Insider Threat Counter Operations (ITCO) is the Coupang Red team for insider risk security, proactively probing our controls and processes and generating actionable insights to drive high impact enterprise improvements for insider risk resilience. We are seeking a deeply technical ITCO Engineer to lead offensive simulation campaigns from our Seattle office. In this role, you will perfect a malicious insider mindset and leverage your technical knowledge and experience to design and execute realistic simulations, to evaluate effectiveness and efficiency of our insider risk management posture, to include the performance of IT Security, Data Loss Prevention (DLP), Identity & Access Management (IAM), Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Global Investigation, HR, and Legal controls and processes. You will bridge innovative tactical operations with enterprise security program management to ensure Coupang stays ahead of the evolving insider risk landscape.

Requirements

Bachelors Degree in Computer Science or a related field
6 years of experience in Security Engineering or Cybersecurity

Nice To Haves

7+ years in offensive operations, digital forensics, red teaming, penetration testing, or insider threat engineering.
Knowledge and experience with investigation of insider threat incidents and in-depth understanding of insider threat mindset and behavior patterns.
Knowledge and experience working within Data Privacy, Identity Access Management (IAM), Privileged Access Management (PAM), and core information security control frameworks.
Capable of emulating an “insider threat” mindset and passionate about building a high impact simulation program.
Hands-on development/scripting skills to create automation, expand and enhance existing tools and techniques, and evaluate and onboard new tools.
Experience operating within large-scale e-commerce or high-growth tech environments.
Familiarity with South Korean data security regulations, compliance standards, and legal frameworks.
Fluent in English and native Korean proficiency.

Responsibilities

Ideate, design, and execute realistic, high impact insider threat simulation campaigns with trending, risk-based attack vectors for sensitive data exfiltration, privilege abuse, and system sabotage.
Design and execute integrity testing of technical controls for IT Security, Information Security, DLP, IAM, and legal hold.
Develop and enhance custom tooling, existing techniques, and automated frameworks to scale simulation capabilities and optimize ITCO testing infrastructure.
Produce high impact reports that translate tactical findings into actionable insights to drive enterprise security program strategy and process improvements.