Staff Insider Threat Analyst

 Company Introduction  

Coupang is reimagining the shopping experience with the goal of wowing each customer from the instant they open the Coupang app to the moment an order is delivered to their door.  
 
Our services in Taiwan include “Rocket Delivery” which offers next-day delivery for a wide selection of items at affordable prices, “Rocket Oversea” which offers free international delivery on millions of best-selling products from Korea, the U.S., and beyond. 

We are looking for talents to help us lead Coupang’s expansion in Taiwan. This is an exceptional opportunity to become a part of Coupang’s growth in Taiwan and create a world where our customers wonder, “How did I ever live without Coupang?”   

• 具備從零開始建立或大幅提升內部威脅偵防成熟度的經驗。

• 具備相關業界證照 (如 GCIH、CISSP)。

• 精通中文與商業英文。

• 熟悉數位鑑識工具，並了解廣泛的鑑識原則.

You will be responsible for the full lifecycle of technical analysis for insider threat cases, from triaging alerts to conducting complex, data-driven reviews. You will be the team's primary technical expert, performing in-depth analysis and reporting your findings to the Investigations team to support formal inquiries.

• →

  Proactive Behavioral Analysis: Proactively hunt for and analyze anomalous user behavior by correlating data from DLP logs, EDR logs, SIEM/SOR logs, and other data sources to identify risks before they escalate.

• →

  Manage the Insider Threat Analysis Lifecycle: Triage incoming alerts, manage the queue, and conduct deep-dive technical reviews of user activity, system artifacts, and application logs to build a comprehensive timeline of events.

• →

  Support Formal Investigations: Partner with and provide detailed, technical findings to the Investigations, Legal, and HR teams. Translate complex technical data into clear, objective reports that serve as the foundation for formal inquiries.

• →

  Act as a Subject Matter Expert: Serve as the team's technical SME for insider threat data sources, providing guidance and insights to other analysts.

• →

  Improve Detections: Continuously develop, tune, and refine insider threat detection logic, creating new playbooks and alerting criteria to mature the program.

• →

  Provide Strategic Insight: Go beyond just the "what" and "who" to report on the "why" and "how," providing actionable recommendations to leadership for strengthening security posture and controls.

• 6+ years of experience in information security, with at least 3+ years of direct, hands-on experience in insider threat analysis.

• Demonstrated mastery of analyzing and correlating security events from:

• UBA/Insider Threat platforms

• EDR solutions

• SIEM / Data Lakes

• Expert-level experience in host-based analysis and deep review of endpoint, application, and network log artifacts.

• Proven ability to work autonomously, manage complex, sensitive cases with minimal supervision, and present technical findings clearly to both technical and non-technical partners.

• An investigative mindset: You are naturally curious, detail-oriented, skeptical, and objective, with a strong drive to find the root cause.

• Scripting skills (Python, PowerShell, Bash) for automating analytical tasks and data analysis.

• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.

• Experience in building or significantly maturing an insider threat program from the ground up.

• Relevant industry certifications (GCIH, CISSP).

• Languages: Mandarin - Native / English - Proficient.

• Familiarity with digital forensic toolsets and a high-level understanding of forensic principles.

Recruitment Process and Others  

Recruitment Process  

• Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview – Offer
• The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances.
• Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage. 

Details to Consider 

• This job posting may be closed prior to the stated end date for application if all openings are filled.
• Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process.
• Those eligible for employment protection (recipients of veteran’s benefits, the disabled, etc.) may receive preferential treatment for employment in accordance with applicable laws. 

Privacy Notice​ 

• Your personal information will be collected and managed by Coupang as stated in the Application Privacy Notice located below: https://www.coupang.jobs/privacy-policy/​