Web Security Engineer(Pricing Intelligence)

About the Company:

As a part of Ecommerce Engineering team we exist for wow customer experiences world class service excellence and hyper growing revenue. To achieve this we build scalable & extensible architecture to support fast business growth & expansion we create high performance & resilient backend system to handle increasing customer requests and we setup stable & fault-tolerant mechanisms to guarantee the customer experience. Creating disruptive products & resilient platforms for customers with world-class talents and cutting-edge technology is our vision and our commitment to the company.

About the Role:

• Responsible for web-side protocol analysis and parameter reverse engineering and improving solutions;
• Continuously iterate on-device attack and defense capabilities and explore the construction of a fully automated adversarial system.

Qualifications:

• 3 years of practical work experience in Web reverse engineering.
• Bachelors degree or above in Computer Science Software Engineering Information Security or related fields
• Successful reverse engineering experience with mainstream Websites (e.g. social media e-commerce finance) is required enabling independent completion of the entire process from decomplication to logical analysis.
• Strong logical analysis and problem-solving skills are essential; the ability to quickly identify technical bottlenecks in the reverse engineering process and develop solutions.
• Preference will be given to candidates with information security certifications (e.g. CEH OSCP) or experience contributing to open-source reverse engineering tools.
• Excellent documentation and communication skills are required; the ability to clearly present reverse engineering results and collaborate effectively with the team.
• Both English and Mandarin speaking is required.

Required Skills

• Proficient in JavaScript reverse engineering with AST (Abstract Syntax Tree) analysis capabilities (Babel Parser) and familiar with common JS obfuscation (string encryption control flow flattening) and deobfuscation techniques;
• Proficient in browser debugging (Chrome DevTools) automation frameworks (Puppeteer/Playwright) and experience with Chromium kernel modifications is a plus;
• Familiar with web anti-scraping measures (browser fingerprinting & behavior TLS fingerprinting etc.) and human-machine identification measures (click/slider CAPTCHA reCaptcha Akamai etc.);
• Familiar with common application layer protocols (HTTP/WebSocket) and possess network packet capture and analysis capabilities (Charles/Wireshark);
• Familiar with common encryption algorithms (RSA/AES/HMAC) and interface signature mechanisms;
• Proficient in web security with experience in discovering and exploiting OWASP Top 10 vulnerabilities and familiar with WAF (Web Application Firewall) and other security protections;
• Possess Python/ development skills and be able to independently write automation tools.

Recruitment Process

• Application Review - Phone Interview - Onsite (or Virtual Onsite) Coding Interview Offer

• The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.

• Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.

Details to Consider

• This job posting may be closed prior to the stated end date for application if all openings are filled.

• Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.

• Those eligible for employment protection (recipients of veterans benefits the

• disabled etc.) may receive preferential treatment for employment in accordance with applicable laws.

• Job titles and responsibilities may be subject to change depending on the candidates overall experience etc. This will be communicated to the candidate at the appropriate time before the offer.

• Hiring may be restricted in case the legal qualifications required for hiring and work performance is not met.

Privacy Notice

Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below.