Staff Solution Engineer
Summary
Staff Solution Engineer on Coupang's Ecommerce Engineering team in Singapore, working on web protocol analysis and parameter reverse engineering plus building on-device attack/defense and automated adversarial capabilities. Day-to-day spans JS deobfuscation, browser/bot-detection countermeasures, packet capture analysis, and automation tooling in Python/Node.js.
Company Introduction
We exist to wow our customers. We know we’re doing the right thing when we hear our customers say, “How did I ever live without Coupang?” Born out of an obsession to make shopping, eating, and living easier than ever, we are collectively disrupting the multi-billion-dollar commerce industry from the ground up and establishing an unparalleled reputation for being leading and reliable force in South Korean commerce.
We are proud to have the best of both worlds — a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.
Our mission to build the future of commerce is real. We push the boundaries of what’s possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.
Role Overview
As a part of Ecommerce Engineering team, we exist for wow customer experiences, world class service excellence and hyper growing revenue. To achieve this, we build scalable & extensible architecture to support fast business growth & expansion, we create high performance & resilient backend system to handle increasing customer requests and we setup stable & fault-tolerant mechanisms to guarantee the customer experience. Creating disruptive products & resilient platforms for customers with world-class talents and cutting-edge technology is our vision and our commitment to the company.
What You Will Do
- Responsible for web-side protocol analysis and parameter reverse engineering, and improving solutions;
- Continuously iterate on-device attack and defense capabilities, and explore the construction of a fully automated adversarial system.
Basic Qualifications
- Bachelor's degree or above in Computer Science, Software Engineering, Information Security, or related fields, with at least 3 years of practical work experience in Android/iOS reverse engineering
- Successful reverse engineering experience with mainstream Websites (e.g., social media, e-commerce, finance) is required, enabling independent completion of the entire process from decomplication to logical analysis.
- Strong logical analysis and problem-solving skills are essential; the ability to quickly identify technical bottlenecks in the reverse engineering process and develop solutions.
- Preference will be given to candidates with information security certifications (e.g., CEH, OSCP) or experience contributing to open-source reverse engineering tools.
- Excellent documentation and communication skills are required; the ability to clearly present reverse engineering results and collaborate effectively with the team.
Preferred Qualifications
- Proficient in JavaScript reverse engineering, with AST (Abstract Syntax Tree) analysis capabilities (Babel Parser), and familiar with common JS obfuscation (string encryption, control flow flattening) and deobfuscation techniques;
- Proficient in browser debugging (Chrome DevTools), automation frameworks (Puppeteer/Playwright), and experience with Chromium kernel modifications is a plus;
- Familiar with web anti-scraping measures (browser fingerprinting & behavior, TLS fingerprinting, etc.) and human-machine identification measures (click/slider CAPTCHA, reCaptcha, Akamai, etc.);
- Familiar with common application layer protocols (HTTP/WebSocket), and possess network packet capture and analysis capabilities (Charles/Wireshark);
- Familiar with common encryption algorithms (RSA/AES/HMAC) and interface signature mechanisms;
- Proficient in web security, with experience in discovering and exploiting OWASP Top 10 vulnerabilities, and familiar with WAF (Web Application Firewall) and other security protections;
- Possess Python/Node.js development skills and be able to independently write automation tools.
Recruitment Process
- Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer
- The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
- Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage.
Details to Consider
- This role is open to Singapore Citizens and Permanent Residents only
- This job posting may be closed prior to the stated end date for application if all openings are filled.
- Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
- Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws.
- Job titles and responsibilities may be subject to change depending on the candidate’s overall experience, etc. This will be communicated to the candidate at the appropriate time before the offer.
- Hiring may be restricted in case the legal qualifications required for hiring and work performance is not met.
Privacy Notice
Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below.
Skills
As published by greenhouse · 16 questions
Basics
First Name, Last Name, Email, Phone, Resume/CV, Cover Letter, Location
Short answers (4)
- LinkedIn Profile optional
- - Name of Relative(s): optional
- - Relationship: optional
- - Working Org / Team: optional
Pick from a list (12)
- Are you a Singapore Citizen or Permanent Resident? optional
- What is your nationality?
- By submitting your resume, you consent to the required collection and use, required provision, and consignment as set forth in our Privacy Policy(https://privacy.coupang.com/en/land/jobs/).
- Coupang Corporation or its affiliates and subsidiaries* (collectively referred to as “Coupang”) does not collect or use any personal information other than the types of information specified in this Consent. Please ensure that your resume does not include any personal information other than the types specified in this Consent.
- Name, contact information, email address, nationality, educational background, work experience, qualifications, national merit status (for special hiring program applicants only), relative’s name/relationship/team and application history are collected and used on an ongoing basis for recruitment purposes and may be provided to any of our affiliates and subsidiaries*, other than the company to which you originally applied, for the purpose of reviewing and conducting recruitment for similar positions. Personal information collected and provided will be retained for the duration of the year-round recruitment retention period defined in the Privacy Policy. You may refuse to provide consent, but such refusal may prevent you from applying.
- Coupang and its affiliate or subsidiary company* will send recruitment notifications through various forms of communication, such as phone, email, and SMS, using the contact information and email address provided by you with the consent.
- Recordings of the interview process and transcriptions of interview audio maybe collected and used for the following purposes: i) to record the interview process, ii) to transcribe and document interview audio, iii) to summarize interview results, iv) to verify the interview process and evaluation results, v) to improve the hiring procedures, vi) to check candidate fit for other open positions, vii) to review past interview records. Collected personal information are retained for 4 years from the notification of hiring result, and then deleted. You may refuse to provide this consent, and refusal will not affect the recruitment process.
- I understand that working with Relatives in the Coupang group of companies (collectively, the "Coupang Group") -- where they can influence each other’s work -- can potentially create conflicts of interest. Therefore, such a situation requires prior approval from the People Operations. In view of the above, I hereby confirm that I DO NOT have any Relatives working in any company within the Coupang Group or serving on the Board of Directors of any company within the Coupang Group;
- Are you currently, or have you been a government official, public servant, or employee of a public institution who may be subject to post‑employment or reemployment restrictions under applicable laws or regulations?
- Do you acknowledge and agree that where required under applicable laws or regulations: optional
- You have the choice to access, correct/update, delete, suspend the processing, and suspend the transfer of your personal information that Coupang holds. Exercising certain choices, such as deletion of personal information, may result in the restriction of the hiring process.
- Document Policy