Staff Web Security Engineer

Coupang•Seattle, WA

11d

About The Position

The Detection Operations team protects Coupang's global attack surface across web, network, email, and endpoint security. The team operates security appliances, endpoint protection platforms, and cloud-based SaaS security services to detect, investigate, and mitigate cyber threats, minimize risk, and improve the company's security posture. The Staff Web Security Engineer designs, deploys, and manages controls protecting externally facing web and API services. The role focuses on WAF detection tuning, bot defense, DDoS mitigation, proactive threat hunting, API security, and large-scale analysis of SIEM data, security telemetry, and web access logs. The engineer also develops operational documentation, automation, detection logic, playbooks, and response procedures, and partners with engineering, infrastructure, and security teams on incident investigations and security initiatives.

Requirements

Bachelor's degree in Computer Science or a related field.
At least 4 years of experience in Security Engineering or Cybersecurity.
Ability to analyze security telemetry, access logs, and detection events, identify root causes, troubleshoot complex issues, and drive remediation.
Strong communication and stakeholder management skills, including the ability to influence decisions, build alignment, and communicate risks and recommendations using data-driven insights.
Hands-on experience securing large-scale web environments, including DNS, DDoS mitigation, web application attacks, bot management, vulnerability response, and security event investigations.
Ability to travel internationally as required and obtain and maintain necessary travel documentation.
Experience analyzing large datasets using SQL and security analytics platforms such as SIEM solutions, AWS Athena, Splunk, Elastic, or similar technologies.
Proficiency in one or more programming or scripting languages such as Python, JavaScript, Go, or Bash for automation and security engineering.
Experience investigating and responding to web security incidents in large-scale e-commerce, technology, or internet-facing environments.
Strong understanding of web application security principles, common attack techniques, and frameworks such as OWASP Top 10 and MITRE ATT&CK.
Experience developing security automation, operational workflows, detection logic, playbooks, or response procedures.
Excellent written and verbal communication skills and ability to collaborate across engineering, infrastructure, product, and security teams.

Nice To Haves

10 or more years of experience in Web Security, Security Operations, Threat Detection, Incident Response, or a related cybersecurity discipline.
Industry-recognized cybersecurity certification such as CISSP, GIAC, GSEC, GCIH, GCIA, Security+, or equivalent.
Hands-on production experience with web security CDN, WAF, bot management, or DDoS protection platforms.
Korean language proficiency.

Responsibilities

Design, deploy, and manage security controls that protect externally facing web and API services from cyber threats.
Analyze and tune WAF detections to reduce false positives and false negatives, improve coverage, deploy policies, and respond to emerging vulnerabilities and CVEs.
Detect and mitigate automated and malicious bot activity, improving detection logic, policy effectiveness, and bot defense capabilities.
Improve DDoS detection and mitigation through monitoring, analysis, and policy optimization.
Conduct proactive web threat hunting to identify emerging attack patterns and strengthen detection and preventive controls.
Develop and maintain operational procedures, documentation, and automation workflows to improve security operations efficiency and scalability.
Analyze API security events and improve detection, investigation, and response workflows.
Analyze SIEM data, security telemetry, and web access logs at scale to identify trends, investigate incidents, and report actionable insights and metrics.
Partner with engineering, infrastructure, and security teams to investigate incidents, improve processes, and advance cross-functional security initiatives.
Create and maintain monitoring use cases, detection logic, playbooks, and response procedures.