Company introduction

Coupang exists to make customers delighted. When customers say 'how did we ever live without Coupang?', we know we are fulfilling our mission. With the single-minded aim of making customers' shopping, meals and daily life easier, Coupang is driving innovation across the e-commerce industry, which is worth hundreds of millions of dollars. Coupang is one of the fastest-growing e-commerce companies and has built a unique position in the domestic commerce industry and the trust of customers. 

Coupang proudly considers itself a large global listed company built on a startup culture. This preserves the agility of its founding days and is our growth engine as we continually launch new services and expand our business. Every Coupang employee is given the opportunity to show an entrepreneurial spirit and drive new innovations and initiatives. The boldness to dive into work without hesitation and achieve results is the essence of how Coupang works. At Coupang, you will see yourself, your colleagues, your team and the whole company growing every day. 

Every Coupang employee is genuinely committed to Coupang's mission of creating the future of commerce. We solve customers' problems, challenge conventional ideas and received wisdom, and go beyond what is considered achievable. If you want an amazing work experience in an always-on, high-tech, hyper-connected world, join Coupang now.

Job introduction

The Coupang Detection Ops team operates and manages security appliances, endpoint security solutions and various SaaS-based security services across web security, network security, email security and endpoint security. We detect and block cyber threats arising across Coupang's broad attack surface to minimise damage from security incidents, and play a core role in building a recurrence-prevention framework through accurate root-cause analysis. By joining the Detection Ops team, you can gain practical experience spanning web, network, endpoint and email security, and through close collaboration with the experts responsible for each area you will naturally broaden your perspective and expertise across security as a whole. Depending on need, there are opportunities to participate directly in and gain experience with multiple security solutions and services, without being confined to a specific domain. In this way, we provide an environment in which you can grow into an engineer with broad and solid security operations capability, not limited to a single technology.

Responsibilities

• Design and implement email security related infrastructure
• Operate and monitor email security solutions
• Identify and respond to email-based attacks involving phishing, spam and malicious files
• Test, introduce and report on results of email security solutions
• Develop email-related detection policies and establish playbooks
• Review email security, establish procedures and guidelines, and maintain them on an ongoing basis
• Respond swiftly to email-related security incidents, and carry out reporting and measures to minimise damage
• Run phishing simulation training, monitor trends and write reports
• Research the latest email security technologies and trends and apply them to systems
• On-call duty to prepare for incidents and issues outside working hours

Requirements

• Experience and ability in email header analysis, threat analysis and response
• Experience analysing various malicious files, phishing websites and similar
• Experience setting email security policies and establishing procedures
• Knowledge of email traffic and experience establishing security policies and procedures
• A total of 12 or more years' experience, including experience operating email security systems and solutions
• Experience operating email security services
• Experience running phishing simulation training
• Understanding of and practical experience with email authentication technologies such as SPF, DKIM and DMARC
• Basic knowledge of network security and system security
• Excellent analytical skills and problem-solving ability
• Excellent communication skills, able to persuade people and build consensus based on data and insight
• A bachelor's degree in computer science or cybersecurity, or equivalent practical experience

Preferred

• Experience developing automation and scripts (Python, Go, Linux shell, PowerShell, etc.)
• Cybersecurity certifications (e.g. CISSP, Information Processing Engineer, Information Security Engineer, etc.)
• Knowledge of data analysis work such as SQL queries and data visualisation (Splunk, ELK Stack)
• Knowledge of cloud platforms (e.g. AWS, Azure, GCP)
• Knowledge or applied experience of OWASP and MITRE ATT&CK
• Basic knowledge of on-premise and cloud environments (AWS, Azure, GCP etc.)

Selection process and information

• Selection process
  • Document screening - job fit interview - core competency interview - final offer
  • The selection process may differ by role and may change depending on schedule and circumstances.
  • Selection schedule and results will be notified individually to the email address registered on your application.
• Notes
  • This advertisement may close early once recruitment is complete.
  • If there is any false information in your application, your offer may be cancelled.
  • Candidates eligible for employment protection (veterans, persons with disabilities, etc.) may receive preference in accordance with applicable law.
  • Job grade and scope of duties may be changed taking into account the candidate's overall career and experience. If such a change is needed, the candidate will be contacted at an appropriate time before the final offer notice.
  • Employment may be restricted if legally required qualifications for recruitment and performance of duties are not met.
  • Employment is permanent and includes a 12-week probation period. However, where required for business reasons, the above probation period may be not applied, shortened or extended.

Privacy policy 

• Coupang Group collects and processes your personal data in accordance with its applicant privacy policy (link below). https://www.coupang.jobs/kr/privacy-policy/

Document return policy 

1. This notice is given pursuant to Article 11(6) of the Act on Fair Hiring Procedures.
2. Applicants who did not receive a final offer may request the return of the recruitment documents they submitted, in accordance with the Act on Fair Hiring Procedures. However, this does not apply to documents submitted via the website or by email, or documents voluntarily submitted without the company's request, and if recruitment documents are lost due to natural disaster or other causes not attributable to the company, they are deemed returned.
3. An applicant requesting return under paragraph 2 above shall complete a recruitment document return request form [Form No. 3 of the Enforcement Rules of the Act on Fair Hiring Procedures] and submit it by email ([contact details removed]). Once submission is confirmed, the documents will be sent by registered mail to the address specified within 14 days. In this case, registered postage is payable by the recipient, so please note this. 
4. To prepare for return requests under paragraph 2 above, the company will keep the original recruitment documents submitted by applicants for 180 days from the date recruitment decisions are finalised. If return is not requested by then, all recruitment documents will be destroyed without delay in accordance with the Personal Information Protection Act.
5. However, paragraphs 1 to 4 above apply only where Korean labour laws apply. They do not apply otherwise.