Senior Security Engineer, Penetration Tester

The role

The Senior Security Engineer will conduct hands-on penetration testing across web, mobile, API, and cloud-related environments. They will identify vulnerabilities, provide remediation guidance, and collaborate with the Korea security team.

What you will do

• Execute authorized penetration tests across web applications, mobile applications, APIs, and cloud-related attack surfaces.
• Identify attack surfaces and apply appropriate testing methods.
• Produce clear supporting evidence for validated findings.
• Assess vulnerabilities and distinguish verified findings from false positives.
• Provide actionable remediation guidance.
• Use Linux, command-line utilities, and penetration-testing tools to complete testing tasks.
• Build or modify scripts for request automation, test-data processing, or analysis of results.
• Coordinate testing status, blockers, findings, and next steps with the Korea security team and Taiwan stakeholders.

Required qualifications

• Hands-on penetration-testing capability across web, mobile, or API environments.
• Ability to use penetration-testing tools in Linux or command-line environments.
• Ability to assess vulnerabilities, explain supporting evidence and impact, and provide actionable remediation guidance.
• Programming or scripting capability that supports security testing.
• Offensive-security experience sufficient to execute defined penetration-testing activities with appropriate support.
• Fluency in both Mandarin Chinese and English.
• Ability to collaborate across Taiwan and Korea security activities.

Nice to have

• Experience completing scoped penetration-testing activities with clearly defined support, requirements, and testing boundaries.
• Experience responding constructively to technical direction, review feedback, and newly identified testing requirements.
• Experience testing multiple applications, external services, or internal applications through penetration testing or legally authorized bug-bounty work.
• Experience in e-commerce, banking, web services, or other complex application environments.
• Exposure to cloud-security testing, including architecture, identity and access, public interfaces, or configuration risks.
• Red Team or adversary-simulation exposure.
• A degree in Computer Science, Computer Engineering, or a related field.
• An offensive-security certification such as OSCP, OSCE, OSED, CREST, or SANS.
• Ability to demonstrate an authorized penetration-testing case covering scope, methodology, evidence, findings, limitations, and delivery outcome.
• Ability to complete a controlled attack-surface analysis and testing plan for a multi-interface application.

Before you apply

• Application Review - Job Fit Interview - Focus Interview – Offer
• Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information.

About the company

Coupang is reimagining the shopping experience with the goal of wowing each customer. Their services in Taiwan include Rocket Delivery and Rocket Overseas.