Security Automation Engineer [L5]

Coupang•Seattle, WA

1d•$152,000 - $169,000•Remote

About The Position

The Detection Engineering (DE) team within Coupang’s Digital Trust organization designs and operates end-to-end security threat detection and response automation systems. Our mission is to build an AI-powered Security Operations Center (AI-SOC) that enables faster, more accurate, and scalable security operations through intelligent automation. Working under a Detection-as-Code philosophy, we manage the entire detection lifecycle, including threat scenario development, log collection, detection engineering, automated response orchestration, and AI-driven threat analysis. As part of the Automation Engineering pillar, this role is responsible for designing, developing, and operating automated workflows that analyze, investigate, and respond to security threats at scale. The team builds and maintains integrations across a broad range of security platforms, develops AI Agent and LLM-based analysis capabilities for automated triage and investigation, and ensures the reliability, scalability, and operational excellence of critical security automation systems in production. This position offers the opportunity to shape the future of AI-driven security operations by building the technologies that power Coupang’s next-generation AI-SOC platform.

Requirements

5+ years of professional software engineering experience with strong proficiency in Python development, including modular design, code quality, exception handling, and testing
Experience designing, implementing, and improving security event processing, detection, and response workflows through software engineering
Hands-on experience with security technologies such as SIEM, EDR, SOAR, and CTI platforms, including customization, integration, and operational support
Experience developing integrations using RESTful APIs, Webhooks, and JSON-based data processing
Experience designing, building, and operating systems in cloud environments, preferably AWS
Strong problem-solving skills with the ability to diagnose, troubleshoot, and resolve complex system incidents
Experience with Git-based software development workflows and CI/CD pipeline practices

Nice To Haves

Experience designing, developing, or operating AI-SOC platforms or LLM-powered security automation solutions
Experience building applications using LLM agent and workflow frameworks such as LangChain, LlamaIndex, or similar technologies
Experience operating large-scale SOAR or workflow automation platforms with multiple production automation workflows
Experience working with Kubernetes and EKS environments in production
Experience extending or developing custom capabilities for security automation platforms
Strong understanding of SIEM detection logic and security event lifecycle management
Experience operating log processing pipelines, message queues, and related distributed infrastructure
Experience building security operations dashboards and analytics solutions using data visualization tools

Responsibilities

Design and develop normalization, enrichment, and automated triage workflows to analyze and process security detection events at scale.
Design, develop, and operate SOAR workflows that streamline and automate security operations processes.
Build and maintain integrations with security platforms and external services, including SIEM, EDR, CTI, ticketing systems, and SaaS/API-based solutions.
Develop and enhance the AI-SOC framework by creating LLM-based triage and analysis logic, confidence scoring mechanisms, and automated response orchestration capabilities.
Drive operational excellence by managing incident response for SOAR and automation systems, operating logging and monitoring infrastructure, and improving system reliability.
Design and implement automated response scenarios based on detection use cases while collaborating closely with SOC and Incident Response teams.
Analyze and optimize automation workflows by identifying performance bottlenecks and driving continuous improvements in efficiency, scalability, and effectiveness.