Staff Security Engineer (Continuous Threat Exposure Management)

The role

This person will design and build the CTEM platform architecture to support detection gap analysis, log visibility assessment, and control validation. They will work across security architecture, data engineering, full-stack development, and AI-based engineering.

What you will do

• Design detection data lineage from vendor logs to MITRE ATT&CK coverage metrics
• Design an engine that links vendor rules, Use Cases, and log schemas across security solutions
• Build a graph-based analysis system to visualize security data relationships
• Build AI Harness infrastructure to support AI agents in performing security analysis
• Lead the entire CTEM lifecycle including Scoping, Discovery, Prioritization, Validation, and Mobilization
• Expand and maintain the core data model including security solution catalogs and log source schemas
• Build and maintain data lineage pipelines for security data flows
• Develop and improve the Detection Mapping Engine
• Analyze detection gaps by comparing MITRE ATT&CK coverage with known attacker TTPs
• Implement adapters to collect, normalize, and correlate data from various security platforms

Required qualifications

• 8+ years of experience in cybersecurity
• 2+ years of experience in platform or security tool development within a security environment
• Experience building internal security tools, detection platforms, or security data pipelines
• Deep practical experience in Detection Engineering, security log analysis, or SIEM operation
• Python-based backend development, automation, and security tool development skills
• Database schema design and basic migration experience
• Experience using data lake platforms for large-scale security log analysis including SQL writing
• Experience with security solution API integration such as REST API, GraphQL, or Vendor SDK
• English communication skills for global team collaboration and technical document understanding
• Korean language skills for domestic team collaboration

Nice to have

• Product development experience at a security solution vendor
• Experience using BAS platforms for security validation
• Experience building AI agent infrastructure, workflow automation, or orchestration systems
• Experience building security data pipelines or log normalization frameworks
• TypeScript / JavaScript development skills for data visualization and admin dashboards
• Graph-based data visualization development experience
• Research papers, technical blogs, or conference presentation experience in Detection Engineering or Security Visibility

About the company

Coupang is a global large-scale listed company based on startup culture. It is one of the fastest-growing e-commerce companies, aiming to innovate the e-commerce industry and improve customers' lives.