> Markdown version of [/jobs/ext/2735956-insider-threat-counter-operations-itco-engineer](https://www.wearedevelopers.com/jobs/ext/2735956-insider-threat-counter-operations-itco-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Insider Threat Counter Operations (ITCO) Engineer - **Company:** Coupang, Inc. - **Location:** Seattle, WA, United States - **Experience:** Expert - **Salary:** $142,000.0 - $309,000.0 - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, Cyber Security, Information Leak Prevention, Data Security, Identity and Access Management, Security Information and Event Management, Simulation Software, Scripting, Information Technology, Security Orchestration, Automation & Response - **Published:** September 5, 2026 - **Apply:** https://startup.jobs/insider-threat-counter-operations-itco-engineer-coupang-9871312 ## About the Role * Bachelors Degree in Computer Science or a related field * 6 years of experience in Security Engineering or Cybersecurity, * 7+ years in offensive operations, digital forensics, red teaming, penetration testing, or insider threat engineering. * Knowledge and experience with investigation of insider threat incidents and in-depth understanding of insider threat mindset and behavior patterns. * Knowledge and experience working within Data Privacy, Identity Access Management (IAM), Privileged Access Management (PAM), and core information security control frameworks. * Capable of emulating an "insider threat" mindset and passionate about building a high impact simulation program. * Hands-on development/scripting skills to create automation, expand and enhance existing tools and techniques, and evaluate and onboard new tools. * Experience operating within large-scale e-commerce or high-growth tech environments. * Familiarity with South Korean data security regulations, compliance standards, and legal frameworks. * Fluent in English and native Korean proficiency. ## Description We are seeking a deeply technical ITCO Engineer to lead offensive simulation campaigns from our Seattle office. In this role, you will perfect a malicious insider mindset and leverage your technical knowledge and experience to design and execute realistic simulations, to evaluate effectiveness and efficiency of our insider risk management posture, to include the performance of IT Security, Data Loss Prevention (DLP), Identity & Access Management (IAM), Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Global Investigation, HR, and Legal controls and processes. You will bridge innovative tactical operations with enterprise security program management to ensure Coupang stays ahead of the evolving insider risk landscape. What You Will Do * Ideate, design, and execute realistic, high impact insider threat simulation campaigns with trending, risk-based attack vectors for sensitive data exfiltration, privilege abuse, and system sabotage. * Design and execute integrity testing of technical controls for IT Security, Information Security, DLP, IAM, and legal hold. * Develop and enhance custom tooling, existing techniques, and automated frameworks to scale simulation capabilities and optimize ITCO testing infrastructure. * Produce high impact reports that translate tactical findings into actionable insights to drive enterprise security program strategy and process improvements., * Application Review - Phone Interview - Onsite (or Virtual Onsite) Interview - Offer * The exact nature of the recruitment process may vary according to the specific job and may be changed due to scheduling or other circumstances. * Interview schedules and the results will be informed to the applicant via the e-mail address submitted at the application stage. Details to Consider * This job posting may be closed prior to the stated end date for application if all openings are filled. * Coupang has the right to rescind an offer of employment if a candidate is found to have submitted false information as part of the application process. * Coupang does not discriminate against disabled applicants or those with veteran status. We are proud to offer equal opportunities for all applicants. ## Related Videos - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools) - [Dev Digest 188: CfP time, the risks of NPM and IKEA algorithms](https://www.wearedevelopers.com/magazine/635-dev-digest-188-cfp-time-the-risks-of-npm-and-ikea-algorithms)