Manager, Security Engineering_DART Taiwan

What You Will Do

DART(Detection and Response Team) is responsible for detecting and responding to cyber threats across Coupang, with the objective of minimizing the potential impact of cybersecurity incidents on the organization, and the team currently operates through DART KR and DART US and is expanding its global coverage with the establishment of DART TW.
CSOC(The Cyber Security Operations Center) proactively prevents security incidents through established detection rules and response procedures. When a potential security incident is identified, DART analyzes the event to determine whether it is a true or false positive and assesses its potential impact.
For confirmed incidents, DART identifies the root cause, implements containment and mitigation measures to prevent further damage, and collaborates with cross-functional stakeholders to develop and execute long-term preventive controls, reducing the likelihood of similar incidents recurring. In addition to incident response activities, DART conducts threat hunting by analyzing a wide range of logs and artifacts collected through the SIEM platform. This enables the team to identify and address threats that may have evaded existing detection mechanisms, further strengthening the organization's overall security posture.

Lead and analyze and responses to security incidents, and need hands-on skills

Manage DART Taiwan members

Analyze and respond to security anomalies, intrusion attempts, and breaches, and root cause analysis, containment, creating the report (In particular, candidates are expected to take direct ownership and lead the response to security incidents and suspected security incidents occurring in Taiwan)

Threat hunting to find undetected security threat from the CSOC using data from end points, servers, clouds, network and other sources

Ticket review, and security analysis escalated from CSOC

Improvement of incident response policies and procedures, and process

Oncall to response urgent security events or security issues

Collaborate effectively with internal teams through efficient communication

Basic Qualifications

• 15+ years of experience in information security with at least 8+ years as a Cyber Security Incident Analyst
• English proficiency is required
• Experience of analyzing security event and knowledge of AWS or Cloud environment
• Experience of analyzing system logs of Windows/Linux/Mac systems.
• Experience and skills querying SIEM for analyzing security events from the logs
• Skill to analyze big data or big size logs
• Experience of Host based security investigation (Windows, Linux, Network/Security appliances)
• Experience of analyzing security event from network security solutions (IPS/IDS, Network Monitoring solutions, Netflow, etc)
• Experience of analyzing security event from endpoint security solutions (EDR, HIPS, Anti-Virus, DLP, etc)
• Experience of analyzing security event from application (Web application, Mobile app, Email security, etc)
• Experience in Automation and Scripting using Bash, Python, PowerShell
• Proactive and proactive work attitude
• BS degree or equivalent practical experience

Preferred Qualifications

• Knowledge of container environments (e.g., Kubernetes, Docker)
• Current understanding of Network Traffic/Packet analysis and forensic
• Experience in Automation and Scripting using Bash, Python, PowerShell

Recruitment Process and Others 

Recruitment Process

• Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer
• The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
• Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.

Details to Consider

• This job posting may be closed prior to the stated end date for application if all openings are filled.
• Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
• Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.

Privacy Notice​

• Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below:https://www.coupang.jobs/privacy-policy/​