Senior Staff Mobile Security Engineer (Digital Trust)

About the role

We are seeking a Senior Staff Mobile Security Engineer to lead and shape the mobile security posture across Coupang’s consumer‑facing, seller, rider and logistics applications. The role is hands‑on, requiring deep expertise in both iOS and Android threat landscapes and the ability to influence senior engineering leaders.

Key responsibilities

• Build and maintain a comprehensive view of mobile threats, attack paths and systemic control gaps across the company’s mobile estate.
• Define and drive the target mobile security posture, priorities and long‑term roadmap, translating iOS/Android changes into concrete security requirements.
• Establish practical security standards for application integrity, device trust, authentication, credential protection, local data, WebViews, deep links and third‑party SDKs.
• Design and run a repeatable, evidence‑based mobile security assessment and review program, continuously improving it through automation and self‑service tooling.
• Act as a change agent, collaborating with senior directors, principal engineers and mobile leaders to embed security into architecture and engineering practices.
• Initially work hands‑on with code, devices and controls, then help build and manage a small specialist mobile security team.

Required profile

• Extensive hands‑on mobile security experience on both iOS and Android, preferably in a large‑scale consumer technology environment.
• Proven ability to identify systemic issues across multiple applications and translate them into reusable platform controls or standards.
• Strong software engineering background, including production mobile development or development of security tooling.
• Demonstrated influence on senior engineers and leaders without formal authority.
• Experience designing product security architecture, threat modelling and running security assessment programs at scale.

Required skills

• iOS and Android security
• Mobile application security
• Reverse engineering
• App integrity and device trust
• Authentication and secure storage
• Inter‑process communication (IPC)
• WebViews and deep links
• Networking and abuse resistance
• Mobile security assessment and review
• Software engineering and mobile development
• Security tooling development
• Threat modelling and product security architecture