Staff Security Engineer, Penetration Tester
The full posting
Coupang is reimagining the shopping experience with the goal of wowing each customer from the instant they open the Coupang app to the moment an order is delivered to their door. Our services in Taiwan include “Rocket Delivery” which offers next-day delivery for a wide selection of items at affordable prices, “Rocket Overseas” which offers free international delivery on millions of best-selling products from Korea, the U.S., and beyond. We are looking for talents to help us lead Coupang’s expansion in Taiwan. This is an exceptional opportunity to become a part of Coupang’s growth in Taiwan and create a world where our customers wonder, “How did I ever live without Coupang?”
Position: Staff Security Engineer, Penetration Tester
The Staff Security Engineer will conduct hands-on penetration testing across web, mobile, API, and cloud-related environments supporting Coupang’s security activities and services in Taiwan. This role will identify and validate vulnerabilities, communicate technical impact, and provide actionable remediation guidance while working with the Korea security team. The staff engineer is expected to independently own penetration-testing engagements and provide technical guidance to fellow engineers. The role will help maintain consistent security-testing delivery across complex applications, external services, and internal systems in a high-tempo, cross-regional environment.
What will you do?
- Lead or execute authorized penetration-testing engagements across web applications, mobile applications, APIs, and cloud-related attack surfaces.
- Define testing scope, identify attack surfaces, select appropriate testing methods, and document evidence, limitations, and outcomes.
- Assess discovered vulnerabilities, validate technical impact, distinguish verified findings from false positives, and provide remediation guidance.
- Use Linux, command-line utilities, and penetration-testing tools to perform controlled testing and verify results.
- Build or modify scripts that support request automation, test-data processing, or security-test result analysis.
- Coordinate testing scope, ownership boundaries, escalation paths, status updates, and deliverables with the Korea security team and Taiwan stakeholders.
- Independently manage engagement priorities and review testing output to identify gaps and provide specific technical guidance.
Basic Qualifications
- Demonstrated hands-on penetration-testing capability across web, mobile, or API environments.
- Demonstrated experience using penetration-testing tools in Linux or command-line environments.
- Ability to assess vulnerabilities, explain supporting evidence and impact, and provide actionable remediation guidance.
- Experience testing multiple applications, external services, or internal applications through penetration-testing or legally authorized bug-bounty work.
- Offensive-security experience sufficient to carry out penetration-testing engagements.
- Fluency in both Mandarin Chinese and English, able to communicate security findings and remediation guidance in English and Mandarin Chinese.
- Ability to collaborate across Taiwan and Korea security activities, including scope coordination, responsibility boundaries, escalation, and delivery communication.
Preferred Qualifications
- Experience in Red Team or adversary-simulation experience in a complex application environments.
- Exposure to cloud-security testing, including architecture, identity and access, public interfaces, or configuration risks.
- Relevant offensive-security certification such as OSCP, OSCE, OSED, CREST, or SANS.
- Ability to demonstrate an authorized penetration-testing case covering scope, methodology, evidence, findings, limitations, and delivery outcome.
- Ability to complete a controlled attack-surface analysis and testing plan for a multi-interface application.
- Ability to compare remediation options based on risk reduction, constraints, and validation approach.
- Ability to prepare concise bilingual security summaries for technical and cross-regional stakeholders.
- A degree in Computer Science, Computer Engineering, or a related field.
Recruitment Process
- Application Review - Job Fit Interview - Focus Interview – Offer
- The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
- Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.
Details to Consider
- This job posting may be closed prior to the stated end date for application if all openings are filled.
- Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
- Those eligible for employment protection, including recipients of veteran’s benefits and persons with disabilities, may receive preferential treatment for employment in accordance with applicable laws.
Privacy Notice
Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: https://www.coupang.jobs/privacy-policy/
Text as Coupang published it; last compared with the original on 11 Nov 2026.
The application
Your details and CV, then 13 questions.
- 1.1. What is your nationality?Pick one (197 options)
- 2.2. (Optional) Name, contact information, email address, nationality, educational background, work experience, qualifications, national merit status (for special hiring program applicants only), relative’s name/relationship/team and applicatPick one
- 3.3. (Optional) Recordings of the interview process and transcriptions of interview audio maybe collected and used for the following purposes: i) to record the interview process, ii) to transcribe and document interview audio, iii) to summariPick one: 동의합니다 / I agree · 동의하지 않습니다 / I don't agree
- 4.4. (Optional) Coupang or its affiliate or subsidiary company* will send recruitment notifications through transmission media such as phone, email, and SMS using the contact information and email address based on your consent.Pick one: I agree to receive recruitment notifications / 我 同意 接收招聘相關通知。 · I do not agree to receive recruitment notifications / 我 不同意 接收招聘相關通知。
- 5.5. (Optional) Coupang or its affiliate or subsidiary company* will conduct reference checks on you within the following scope based on your consent: Additional reference checks may be conducted on applicants who applied for a job at CoupangPick one
- 6.1. I understand that working with Relatives in the Coupang group of companies (collectively, the "Coupang Group") -- where they can influence each other’s work -- can potentially create conflicts of interest. Therefore, such a situation reqPick one: True / 確認（表示“沒有“親屬任職） · False /不確認（如果“有”，請於下方提供細節）
- 7.- Name of Relative(s) / 親屬姓名:Short answer · optional
- 8.- Relationship / 關係:Short answer · optional
- 9.- Working Org / Team / 任職組織/團隊:Short answer · optional
- 10.1. Are you currently, or have you been a government official, public servant, or employee of a public institution who may be subject to post employment or reemployment restrictions under applicable laws or regulations?Yes or no
- 11.2. Do you acknowledge and agree that where required under applicable laws or regulations:Pick one: I acknowledge and agree / 我知悉並同意 · I do not agree / 我不同意 · optional
- 12.You have the right to inquire/access, request a copy, supplement/correct, delete, suspend the collection, processing, or use and suspend the transfer of your personal information that Coupang holds. Exercising certain rights, such as deletiPick one: Acknowledged /我已知曉
- 13.Document PolicyPick one: Acknowledged /我已知曉
Taken from Coupang's application form as it stood on 11 Nov 2026.
The employer: Coupang
Runs South Korea's largest online retailer and its Rocket Delivery logistics; security staff cover infrastructure engineering, GRC, audit and a global SOC.
Pay and benefits: Staff positions, most of them in Seoul and Taiwan.
A proven pentester or red teamer?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Coupang posts a security role
We read Coupang's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.