Coupang
Staff Security Engineer (Digital Trust Taiwan & Japan)
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Coupang
Coupang, Inc. is a prominent South Korean e-commerce and technology company, founded in 2010 by Bom Kim. Initially starting as a daily deals platform, Coupang has evolved into a leading player in the market, often referred to as the "Korean Amazon."The company is known for its proprietary logistics system, which enables ultra-fast delivery services, and has expanded its offerings to include food delivery, streaming, and luxury retail. Coupang's flagship service, Rocket Delivery, guarantees 99.6% of orders are delivered within 24 hours, supported by a vast logistics network. Other key services include Rocket Fresh for grocery delivery, Coupang Eats for meal delivery, and Coupang Play for streaming video content. The company also recently acquired Farfetch, enhancing its luxury retail presence. With revenues of $20.583 billion in 2022, Coupang serves a significant portion of South Korea's population daily and has begun expanding into international markets like Japan, Singapore, and Taiwan.
Security at Coupang
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Coupang's AppSec philosophy centers on 'Shift Left' principles, aiming to integrate security early in the development pipeline through automation.
- The team prioritizes developer enablement by helping them promptly remediate findings and tuning tools to reduce noise.
- Their risk approach is grounded in industry standards like OWASP Top 10 and CWE Top 25.
Security Team
The AppSec function at Coupang is housed within the Product & Data Security team. Key public-facing members include Abhishek Saraswat (Global Security Operations Center), Sang Won Kim (Senior Security Engineer), and Zeqing Li (Security Engineer). While the team is actively hiring (e.g., Staff Security Engineer, Req R0054282), the total team size and specific reporting structure to the CISO or CTO are not publicly disclosed.
Key Initiatives
Active initiatives include the implementation of secure-by-default guardrails in CI/CD pipelines and the development of auto-remediation capabilities. The team is also focused on designing and implementing application security training and SDL processes. There is currently no public evidence of a formal 'Security Champions' program.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.