Staff Security Engineer – Penetration Tester

About the role

The Staff Security Engineer will conduct hands‑on penetration testing across web, mobile, API, and cloud‑related environments supporting Coupang’s security activities and services in Taiwan. This role will identify and validate vulnerabilities, communicate technical impact, and provide actionable remediation guidance while collaborating with the Korea security team.

Key responsibilities

• Lead or execute authorized penetration‑testing engagements across web, mobile, API, and cloud attack surfaces.
• Define testing scope, identify attack surfaces, select methods, and document evidence, limitations, and outcomes.
• Assess discovered vulnerabilities, validate impact, differentiate false positives, and provide remediation guidance.
• Use Linux, command‑line utilities, and penetration‑testing tools to perform controlled testing and verify results.
• Build or modify scripts to automate requests, process test data, or analyze security‑test results.

Required profile

• Hands‑on penetration‑testing experience across web, mobile, or API environments.
• Proficiency with penetration‑testing tools in Linux or command‑line environments.
• Ability to assess vulnerabilities, explain evidence and impact, and deliver actionable remediation guidance.
• Experience testing multiple applications, external services, or internal systems through authorized penetration testing or bug‑bounty programs.
• Fluent communication of findings in English and Traditional Chinese and collaboration with Taiwan and Korea security teams.

Required skills

• Linux operating system.
• Command‑line utilities.
• Penetration‑testing tools (e.g., Burp Suite, Metasploit).
• Scripting for automation and data processing.
• Web, mobile, API, and cloud security testing.