Staff Cyber Threat Intelligence Analyst, Executive Protection

coupang; Seattle (WA); On-site; USD 140,000 - 190,000; Full time

Job summary

Coupang's Cyber Threat Intelligence team within GHOST (Global Hunting, Oversight, and Strategic Triage) under Digital Trust defends executives by monitoring digital exposure, impersonation, and credential safety across open web, social platforms, dark web, and data-leak sites.

You will translate analytical findings into actionable protective measures, coordinate with Corporate Security, Legal, Privacy, Investigations, and other teams, and lead significant threat investigations at staff level

Responsibilities

• Executive Digital Exposure Monitoring: Monitor executive-related digital exposure across open web, social media, professional networks, data leak sites, the deep web, and the dark web; identify exposures requiring action.
• Executive Impersonation Detection and Response: Detect and analyze impersonation across profiles, email accounts, domains, websites, messages, and other media; coordinate takedown and protective actions.
• Personal Information and Credential Exposure Response: Monitor external exposure of sensitive executive data; assess risk and support removal and protection efforts.
• Protective Intelligence and Threat Assessment: Investigate phishing, social engineering, BEC, personal data disclosures, harassment, and indicators of targeting; assess credibility and intent.

Job description

We exist to wow our customers. We know we're doing the right thing when we hear our customers say, \"How did we ever live without Coupang?\" Born out of an obsession to make shopping, eating, and living easier than ever, we're collectively disrupting the multi-billion-dollar e-commerce industry from the ground up. We are one of the fastest-growing e-commerce companies that established an unparalleled reputation for being a dominant and reliable force in South Korean commerce.

We are proud to have the best of both worlds - a startup culture with the resources of a large global public company. This fuels us to continue our growth and launch new services at the speed we have been since our inception. We are all entrepreneurs surrounded by opportunities to drive new initiatives and innovations. At our core, we are bold and ambitious people that like to get our hands dirty and make a hands-on impact. At Coupang, you will see yourself, your colleagues, your team, and the company grow every day.

Our mission to build the future of commerce is real. We push the boundaries of what's possible to solve problems and break traditional tradeoffs. Join Coupang now to create an epic experience in this always-on, high-tech, and hyper-connected world.

Role Overview

Coupang's Cyber Threat Intelligence team is part of GHOST within Proactive Security under the Digital Trust organization. GHOST stands for Global Hunting, Oversight, and Strategic Triage. The organization proactively identifies and analyzes cyber threats that may affect Coupang and turns its findings into meaningful security actions.

The Cyber Threat Intelligence team collects and analyzes information from a wide range of sources, including open sources, commercial intelligence services, the dark web, and security telemetry. The team tracks threat actors and campaigns and identifies and responds to threats that may affect Coupang, including phishing, fraud, brand and executive impersonation, exposed data and credentials, malicious infrastructure, and high-risk vulnerabilities.

This position will primarily focus on intelligence activities that protect Coupang executives. You will continuously monitor digital exposure, impersonation, personal information exposure, phishing, social engineering, and other online threats affecting executives. You will turn analytical findings into actionable intelligence that supports timely protective measures and informed decision-making.

The focus of this position is intelligence-led executive protection rather than physical close protection. However, because information discovered in the digital environment may indicate potential risks to physical safety, you will work closely with Corporate Security, Legal, Privacy, Investigations, and other relevant teams.

Executive protection will be the primary focus of this position. Depending on team priorities and the candidate's expertise, the role may also contribute to other Cyber Threat Intelligence responsibilities, including Fraud Intelligence, Digital Risk Protection, and third-party and supply chain threat intelligence.

This position is being hired at the Staff level and requires at least eight years of professional experience in a relevant security field. We are looking for someone who can independently lead significant and sensitive threat investigations, coordinate response and program improvements across organizations, and translate intelligence into executive decisions and meaningful protective actions.

What You Will Do

• Executive Digital Exposure Monitoring: Monitor executive-related digital exposure across authorized sources, including the open web, social media, professional networking platforms, data leak sites, the deep web, and the dark web. Distinguish legitimate online activity from potential risk and identify exposures that require further action.


• Executive Impersonation Detection and Response: Detect and analyze social media and professional networking profiles, email accounts, domains, websites, messages, images, audio, video, and other synthetic media that impersonate executives. Assess the intent and potential impact of the impersonation and coordinate blocking, notification, takedown, and follow-up actions with relevant teams.


• Personal Information and Credential Exposure Response: Monitor for external exposure of sensitive executive information, including contact details, addresses, account information, credentials, schedules, or location-related information. Assess the accuracy and risk of exposed information and work with relevant teams and external service providers to support removal, takedown, account protection, and other protective actions.


• Protective Intelligence and Threat Assessment: Investigate phishing, social engineering, Business Email Compromise, malicious disclosure of personal information, harassment, threatening references, and indicators of cyber or physical targeting involving executives. Assess source credibility, threat actor intent