Remote opportunity at
CoinbaseSenior Threat Intelligence Engineer
Coinbase is seeking a Senior Threat Intelligence Engineer to join its Security Operations team. Coinbase is a company operating on a remote-first basis that focuses on…
Career Tools
About This Role
Coinbase is seeking a Senior Threat Intelligence Engineer to join its Security Operations team. Coinbase is a company operating on a remote-first basis that focuses on increasing economic freedom and safeguarding billions of dollars in digital assets. This position suits an experienced security professional who can blend technical tracking of advanced cyber adversaries with artificial intelligence engineering. In this role, the engineer will convert data signals into reliable detections and…
Job Description
Coinbase is seeking a Senior Threat Intelligence Engineer to join its Security Operations team. Coinbase is a company operating on a remote-first basis that focuses on increasing economic freedom and safeguarding billions of dollars in digital assets. This position suits an experienced security professional who can blend technical tracking of advanced cyber adversaries with artificial intelligence engineering.
In this role, the engineer will convert data signals into reliable detections and practical insights. Daily responsibilities involve collaborating across the enterprise to deliver information to decision-makers, automating threat tracking, modeling the threat landscape within Vertex Synapse, and maintaining relationships across external intelligence networks.
Coinbase maintains a remote-first work model, though employees gather periodically for in-person working sessions designated as surges. Qualified candidates will handle a high volume of investigative requests and serve as an internal authority on risks impacting the organization, cryptocurrency markets, and the financial sector overall.
Responsibilities
- Automate the analysis and tracking of cyber threats directed at the infrastructure, products, employees, and customers of Coinbase.
- Present and report intelligence findings to executives, partners, and key stakeholders to shape organizational decisions.
- Manage and model the collective threat environment inside the Vertex Synapse Threat Intelligence Platform, providing peer reviews and feedback.
- Build strategic connections with external Threat Intelligence communities to broaden information access and reinforce the trust network.
- Prioritize, document, and handle a high volume of intelligence inquiries to supply accurate and timely details.
- Act as the subject matter expert regarding emerging cyber risks affecting Coinbase, the broader financial sector, and crypto.
Requirements
- Minimum of five years of professional background in incident response, operational threat intelligence, cyber investigations, or security research.
- Proficiency in SQL and at least one programming language such as Go or Python for tooling, scripting, or data analysis.
- Demonstrated ability to convert technical threat data into actionable intelligence summaries for both technical and executive groups.
- Experience independently driving investigations, spotting high-priority threats, and developing solutions with limited supervision.
- Competency in executing open-source intelligence research across diverse subjects.
- Responsible utilization of generative AI with human oversight to improve workflow efficiency, quality, and cost.
Core Skills
Benefits
- Medical coverage
- Dental coverage
- Vision coverage
- 401(k) plan
- Equity eligibility
- Bonus eligibility
Frequently Asked Questions
Is this position remote?
Yes, Coinbase operates on a remote-first model, though employees are expected to attend periodic in-person working sessions known as surges.
What is the salary range for the Senior Threat Intelligence Engineer role?
The annual base salary range is between $180,370 and $212,200 USD, excluding equity and bonuses.
What are the core experience requirements?
Applicants need five or more years of experience in operational threat intelligence, cyber investigations, incident response, or security research, along with proficiency in SQL and a programming language like Python or Go.
Is there an application submission limit?
Candidates are restricted to a maximum of three applications within any six-month period.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.