Senior Attack Surface Engineer: ASM & Automation

Coupang; Seattle (WA); On-site; USD 108,000 - 232,000; Full time

Benefits offered by this job

Annual bonus 0-20%

FSA/HSA

Disability insurance

EAP program

401K with company match

18-21 days PTO per year

12 paid holidays

Paid parental leave

Job summary

Coupang in Seattle seeks a cybersecurity professional to proactively manage attack surfaces, identify threats, and collaborate with engineering teams to mitigate vulnerabilities. You will implement ASM solutions and develop automated detection tools, working across AWS, cloud, and on‑prem environments.

Ideal candidates have 2+ years in security engineering, 5+ years in threat identification, and strong scripting and cloud security knowledge.

Qualifications

• Bachelor's Degree in Computer Science or a related field.
• 2 years of experience in Security Engineering or Cybersecurity.
• 5+ years of hands-on cybersecurity threat identification, response, assessment, and management; 2+ years in Attack Surface Management preferred.

Responsibilities

• Continuously monitor and map exposed IT assets (domains, IPs, ports, cloud environments).
• Detect Shadow IT, abandoned servers, and unnecessary exposed interfaces.
• Identify vulnerable application versions and paths; prioritize remediation by business impact.
• Collaborate with infrastructure and development teams to eliminate vulnerable paths and implement protections.
• Implement and operate ASM solutions; build/use in-house Attack Surface Discovery tools.
• Automate attack surface identification and integrate with existing security tooling.

Skills

ASM solutions

Vulnerability scanners

Automation scripting

Education

Bachelor's degree in Computer Science or related field

Tools

Python

AWS

AI IDEs

Job description

Coupang in Seattle seeks a cybersecurity professional to proactively manage attack surfaces, identify threats, and collaborate with engineering teams to mitigate vulnerabilities. You will implement ASM solutions and develop automated detection tools, working across AWS, cloud, and on‑prem environments.

Ideal candidates have 2+ years in security engineering, 5+ years in threat identification, and strong scripting and cloud security knowledge.