Security Automation Engineer [L5] at Coupang in Seattle, USA

Job description

• The Detection Engineering (DE) team within Coupang’s Digital Trust organization designs and operates end-to-end security threat detection and response automation systems. Our mission is to build an AI-powered Security Operations Center (AI-SOC) that enables faster, more accurate, and scalable security operations through intelligent automation. Working under a Detection-as-Code philosophy, we manage the entire detection lifecycle, including threat scenario development, log collection, detection engineering, automated response orchestration, and AI-driven threat analysis.
• As part of the Automation Engineering pillar, this role is responsible for designing, developing, and operating automated workflows that analyze, investigate, and respond to security threats at scale. The team builds and maintains integrations across a broad range of security platforms, develops AI Agent and LLM-based analysis capabilities for automated triage and investigation, and ensures the reliability, scalability, and operational excellence of critical security automation systems in production. This position offers the opportunity to shape the future of AI-driven security operations by building the technologies that power Coupang’s next-generation AI-SOC platform.

Responsibilities

• Design and develop normalization, enrichment, and automated triage workflows to analyze and process security detection events at scale.
• Design, develop, and operate SOAR workflows that streamline and automate security operations processes.
• Build and maintain integrations with security platforms and external services, including SIEM, EDR, CTI, ticketing systems, and SaaS/API-based solutions.
• Develop and enhance the AI-SOC framework by creating LLM-based triage and analysis logic, confidence scoring mechanisms, and automated response orchestration capabilities.
• Drive operational excellence by managing incident response for SOAR and automation systems, operating logging and monitoring infrastructure, and improving system reliability.
• Design and implement automated response scenarios based on detection use cases while collaborating closely with SOC and Incident Response teams.
• Analyze and optimize automation workflows by identifying performance bottlenecks and driving continuous improvements in efficiency, scalability, and effectiveness.

Requirements

• 5+ years of professional software engineering experience with strong proficiency in Python development, including modular design, code quality, exception handling, and testing
• Experience designing, implementing, and improving security event processing, detection, and response workflows through software engineering
• Hands-on experience with security technologies such as SIEM, EDR, SOAR, and CTI platforms, including customization, integration, and operational support
• Experience developing integrations using RESTful APIs, Webhooks, and JSON-based data processing
• Experience designing, building, and operating systems in cloud environments, preferably AWS
• Strong problem-solving skills with the ability to diagnose, troubleshoot, and resolve complex system incidents
• Experience with Git-based software development workflows and CI/CD pipeline practices
• Experience designing, developing, or operating AI-SOC platforms or LLM-powered security automation solutions
• Experience building applications using LLM agent and workflow frameworks such as LangChain, LlamaIndex, or similar technologies
• Experience operating large-scale SOAR or workflow automation platforms with multiple production automation workflows
• Experience working with Kubernetes and EKS environments in production
• Experience extending or developing custom capabilities for security automation platforms
• Strong understanding of SIEM detection logic and security event lifecycle management
• Experience operating log processing pipelines, message queues, and related distributed infrastructure
• Experience building security operations dashboards and analytics solutions using data visualization tools

Skills

Required

• Python development
• SIEM, EDR, SOAR, and CTI platforms
• Cloud environments (preferably AWS)
• Git-based software development workflows
• CI/CD pipeline practices

Preferred

• Kubernetes and EKS environments

Benefits

• Medical/Dental/Vision/Life, AD&D insurance
• Flexible Spending Accounts (FSA) & Health Savings Account (HSA)
• Long-term/Short-term Disability
• Employee Assistance Program (EAP) program
• 401K Plan with Company Match
• 18-21 days of the Paid Time Off (PTO) a year based on the tenure
• 12 Paid Holidays
• Paid Parental leave
• Pre-tax commuter benefits
• MTV - [Free] Electric Car Charging Station
• Our compensation reflects the cost of living across several US geographic markets. At Coupang, your base pay is one part of your total compensation.
• The base pay for this position ranges from $152,000/year in our lowest geographic market to $169,000/year in our highest geographic market. Pay is based on several factors including market location and may vary depending on job-related knowledge, skills, and experience.
• “Other Compensation” includes, but is not limited to, bonuses, equity, or other forms of compensation that would be offered to the hired applicant in addition to their established salary range or wage scale.