Senior Onchain Investigator

Details

Coinbase is a remote-first, but not remote-only company, with quarterly in-person working sessions called “surges.” The Security Operations Threat Intelligence team monitors threats targeting Coinbase and the broader crypto ecosystem. This role owns end-to-end onchain investigations, clusters illicit wallets, combines OSINT with onchain evidence, and turns findings into detections, blocks, and security decisions. The role also leads investigation methodology for the team.

Responsibilities

• Own complex onchain investigations into threat actor infrastructure, scam networks, exploits, and related abuse targeting Coinbase and Base.
• Drive clustering and attribution of illicit actors using blockchain analytics, OSINT, and internal data, then operationalize results into Vertex Synapse and downstream controls.
• Build OSINT and onchain analysis pipelines, queries, and dashboards that automate detections and scale investigative capacity across the team.
• Lead post-incident reviews and root cause analyses to identify gaps and recommend enhancements to controls, detection, and the overall security posture.
• Partner with product, engineering, and risk teams to embed threat and abuse mitigation strategies into the product development lifecycle from ideation through launch.
• Lead new investigative techniques, teach them across Security, and brief executives with clear risk, impact, and recommended actions.

Requirements

• At least 5 years of investigation experience, including at least 3 years investigating onchain illicit activity, cryptocurrency abuse, or blockchain intelligence.
• Demonstrated ability to independently lead investigations from collection through stakeholder action.
• Deep knowledge of blockchain ecosystems and protocols, including tracing across chains, bridges, mixers, and laundering patterns.
• Proficiency with Python or Go and SQL for data analysis, scripting, or tooling development supporting intelligence workflows and automation.
• Experience creating investigation methods, dashboards, or pipelines adopted by other investigators.
• Ability to translate complex technical analysis into clear, actionable intelligence for technical and non-technical stakeholders, including executive briefings.
• Strong open-source intelligence (OSINT) research skills across a wide range of topics.
• Ability to use generative AI responsibly while maintaining human oversight and delivering business-ready outputs that improve workflow efficiency, cost, and quality.

Compensation

The annual base salary range is $180,370–$212,200 USD, excluding equity and bonus. Total compensation may also include equity, bonus eligibility, and medical, dental, vision, and 401(k) benefits. Position ID: P77608.