Staff Security Engineer – Penetration Tester

About the role

Coupang is expanding its e‑commerce operations in Taiwan and seeks a Staff Security Engineer specialized in penetration testing. You will lead and execute security assessments across web, mobile, API, and cloud environments, working closely with the Korea security team to protect our services and customers.

Key responsibilities

• Lead or execute authorized penetration‑testing engagements for web, mobile, API, and cloud attack surfaces.
• Define testing scope, identify attack vectors, select methods, and document evidence, limitations, and outcomes.
• Assess discovered vulnerabilities, validate impact, differentiate false positives, and provide remediation guidance.
• Use Linux, command‑line utilities, and penetration‑testing tools to conduct controlled testing and verify results.
• Develop or adapt scripts for request automation, test‑data processing, or result analysis.
• Coordinate scope, ownership, escalation, status updates, and deliverables with Korea security team and Taiwan stakeholders.
• Independently manage engagement priorities and review testing output to identify gaps and provide technical guidance.

Required profile

• Hands‑on penetration‑testing experience across web, mobile, or API environments.
• Proficiency with penetration‑testing tools in Linux or command‑line environments.
• Ability to assess vulnerabilities, explain evidence and impact, and deliver actionable remediation.
• Experience testing multiple applications, external services, or internal systems via authorized engagements or bug‑bounty programs.
• Offensive‑security expertise sufficient to conduct full‑scale penetration tests.
• Fluency in Mandarin Chinese and English for effective communication.

Required skills

• Penetration testing
• Web, mobile, API, and cloud security assessment
• Linux command‑line proficiency
• Scripting (e.g., Python, Bash) for automation and analysis
• Vulnerability assessment and remediation guidance
• Bug bounty program participation
• Offensive security tools and techniques