Staff Web Security Engineer
Core
Design, deploy, and manage security controls for externally facing web and API services, focusing on WAF tuning, bot mitigation, and DDoS defense.
Role type
Staff Web Security Engineer (Detection Operations)
Builds
Security policies, detection logic, automation workflows, and incident response playbooks for Coupang's global e-commerce platform.
Domain
E-commerce, Web Security, Cloud Security
Required skills
Web Application Firewall (WAF) management, Bot management, DDoS mitigation, SIEM analysis, SQL, Python/Go/Bash scripting, OWASP Top 10, MITRE ATT&CK, Security automation, Incident response, Threat hunting
Preferred skills
Large-scale web environment security, Security telemetry analysis, Security certifications (CISSP, GIAC, etc.), Cross-functional collaboration
Technologies
WAF, SIEM, AWS Athena, Splunk, Elastic, SQL, Python, JavaScript, Go, Bash
Responsibilities
Design and manage security controls for web/API services; Tune WAF detections to reduce false positives/negatives; Detect and mitigate bot activity; Strengthen DDoS mitigation capabilities; Conduct proactive threat hunting; Develop operational procedures and automation workflows; Analyze API security events; Perform large-scale analysis of security telemetry and logs; Partner with engineering teams on incident investigation.
Seniority
Staff, hands-on IC with strategic impact
