Remote opportunity at
CoinbaseThreat Intelligence Platform Engineer
Coinbase is seeking a Threat Intelligence Platform Engineer to join its Threat Intelligence team within Security Operations on a remote basis. The organization focuses on increasing…
Career Tools
About This Role
Coinbase is seeking a Threat Intelligence Platform Engineer to join its Threat Intelligence team within Security Operations on a remote basis. The organization focuses on increasing economic freedom and protecting digital assets valued in the billions against sophisticated cyber threats targeting the cryptocurrency sector. This role suits professionals who thrive in an intense, fast-paced environment. In this position, the engineer will take ownership of the production Vertex Synapse instance. Responsibilities…
Job Description
Coinbase is seeking a Threat Intelligence Platform Engineer to join its Threat Intelligence team within Security Operations on a remote basis. The organization focuses on increasing economic freedom and protecting digital assets valued in the billions against sophisticated cyber threats targeting the cryptocurrency sector. This role suits professionals who thrive in an intense, fast-paced environment.
In this position, the engineer will take ownership of the production Vertex Synapse instance. Responsibilities include maintaining platform health, managing backend operations, overseeing cron monitoring, ensuring data hygiene, and integrating new intelligence sources. The chosen candidate will collaborate with Product and Security teams to transform intelligence requirements into functional production capabilities and deploy automations that embed threat intelligence into security operations.
Coinbase operates as a remote-first company, though staff members gather periodically for quarterly in-person working sessions known as surges. The position requires adherence to an application limit of up to three submissions within any six-month period. Qualified applicants will receive consideration without regard to protected characteristics.
Responsibilities
- Manage the production Vertex Synapse instance, overseeing platform health, backend operations, cron monitoring, and data hygiene
- Develop and maintain intelligence feed integrations, tagging, and enrichments to ensure sources are usable for stakeholders
- Deliver intelligence into downstream controls and data pipelines such as blocklists, detections, data warehouses, and agent workflows
- Collaborate across Product and Security to translate intelligence needs into production capabilities
- Design and implement features, fixes, and tooling rapidly to support Intelligence Analysts and stakeholders
Requirements
- Minimum of two years of experience building and operating threat intelligence platforms or security data pipelines in production
- Programming background in Python, Go, and/or Storm, featuring deployment of production-quality code and CI/CD ownership
- Experience with ingesting, modeling, tagging, and lifecycle management for indicators and intelligence data at scale
- Demonstrated ability to troubleshoot and resolve production system and data quality issues while implementing root-cause fixes
- Experience translating cross-functional stakeholder requirements into technical solutions within security operations
- Responsible utilization of generative AI with human oversight to maintain workflow efficiency, cost, and quality
Core Skills
Benefits
- Medical insurance
- Dental coverage
- Vision care
- 401(k) plan
- Equity eligibility
- Bonus eligibility
Frequently Asked Questions
Is this position remote?
Yes, Coinbase operates as a remote-first company, though employees are expected to attend quarterly in-person working sessions called surges.
What is the salary range for this role?
The annual base salary ranges from $144,500 to $170,000 USD, with exact pay varying by location. Total compensation may also include equity, bonuses, and benefits.
What are the core experience requirements?
Candidates must have at least two years of experience building and operating threat intelligence platforms or security data pipelines in production, along with programming skills in Python, Go, and/or Storm.
Are there any application limits?
Yes, candidates are permitted to submit a maximum of three applications within a six-month period.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.