Staff Security Engineer (3rd-Party Security Assessment)

Who you are

You have a strong background in information security with at least 8 years of experience in assessing security risks and managing third-party vendor security. Your understanding of application authentication, authorization, logging, and API integration is comprehensive, allowing you to effectively evaluate security postures. You possess a solid grasp of IT infrastructure, networks, and foundational technologies, which enables you to identify vulnerabilities and recommend improvements. Your experience includes managing security for personal data processing systems, ensuring compliance with regulations and best practices. You excel in collaborating with various departments, demonstrating flexible communication skills that facilitate effective teamwork. A degree in information technology, information security, computer science, or a related field is essential for this role.

Desirable

Experience in security reviews and assessments of third-party vendors is a plus, as is familiarity with identifying and managing security risks associated with third-party services. Your ability to stay updated on new security threats, industry trends, and regulatory changes will contribute to the development and enhancement of security assessment methodologies.

What you'll do

In this role, you will evaluate the security levels of third-party vendors, including SaaS and Generative AI services, by reviewing their security policies, procedures, and technical controls. You will be responsible for identifying security risks associated with new and existing vendor contracts, collaborating with relevant departments to mitigate these risks effectively. Your work will involve developing and improving methodologies for assessing third-party vendor security, ensuring that security requirements are met and maintained. You will monitor compliance with security guidelines and provide recommendations for improvements based on industry best practices. Additionally, you will keep abreast of emerging security threats and regulatory changes, adapting your assessment strategies accordingly. Your contributions will help maintain a secure environment for Coupang's operations and protect customer data.

What we offer

Coupang provides a dynamic work environment where you can witness daily growth and innovation. You will have the opportunity to work with cutting-edge technologies in a hyper-connected world, contributing to the future of commerce. We encourage you to apply even if your experience doesn't match every requirement, as we value diverse perspectives and backgrounds. Join us to be part of a mission-driven company that prioritizes customer satisfaction and security.