Senior Application Security Engineer

Details

Ready to be pushed beyond what you think you’re capable of?

At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform — and with it, the future global financial system.

To achieve our mission, we’re seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company’s hardest problems.

Our work culture is intense and isn’t for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there’s no better place to be.

While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.

About the Role

The Application Security organization at Coinbase is seeking to hire an experienced Senior Security Engineer to design, implement, and deploy baseline security solutions to improve the security of all Coinbase apps and services. In this role, you will collaborate closely with engineering teams, product managers, and other security engineers to embed security best practices throughout the software development lifecycle to efficiently remediate classes of security vulnerabilities at scale.

Responsibilities

• Design, implement and deploy baseline security controls to secure all of Coinbase apps and services.
• Design, implement and deploy security guardrails to eliminate classes of security vulnerabilities at scale.
• Build automation to scale the security review process.
• Collaborate with engineering teams to provide expert guidance on secure product development, secure vendor product integration, and vulnerability remediation.
• Evaluate and recommend new security technologies and solutions to enhance the company's security posture.
• Participate in incident response activities, providing architectural insights and recommendations for containment and remediation.
• Mentor and guide junior security engineers and security champions on security best practices and architectural principles.
• Influence and drive strategic security initiatives to improve overall security maturity and efficiency.

Requirements

• A Bachelor’s degree in Computer Science, Computer Engineering, or a related field.
• 5+ years of experience in software development, security architecture, application security, or offensive security roles, with a strong focus on building security systems.
• Experience with designing and implementing automated security tools in Python or Go.
• A deep understanding of secure system design principles, authentication and authorization mechanisms.
• Proficiency in designing and implementing security solutions across various technology stacks and cloud environments (e.g., AWS, GCP, Azure).
• Strong experience with threat modeling methodologies and security design reviews, used to inform system development.
• Excellent communication and interpersonal skills, with the ability to effectively articulate complex security concepts to both technical and non-technical audiences.
• Proven ability to work independently and collaboratively in a fast-paced, dynamic environment.
• Ability to influence and drive change across an organization.

Nice to haves

• Master’s degree in Computer Science or a related field.
• AI security experience.
• Experience with Web3 security concepts, blockchain technologies, and smart contract security.
• Experience with large-scale distributed systems and microservices architectures.

Benefits

• Medical Plan, Dental and Vision Plan with generous employee contributions
• Health Savings Account with company contributions each pay period
• Disability and Life Insurance
• 401(k) plan with company match
• Wellness Stipend
• Mobile/Internet Reimbursement
• Connections Stipend
• Volunteer Time Off
• Fertility Counseling and Benefits
• Generous Time off/Leave Policy
• The option of getting paid in digital currency