Tech Stack
Tag name is followed by "@" symbol and proficiency level value.
About proficiency levels:
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
AI @ 6
Data Analysis @ 6
GenAI
Generative AI @ 6
Go @ 6
Python @ 6
Reporting @ 6
SQL @ 6
Security @ 6
- 1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;
- 3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;
- 7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;
- 10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.
Details
Coinbase is a remote-first, but not remote-only company. Employees are expected to meet quarterly for in-person working sessions called “surges.”
Security is a primary competency at Coinbase, and the Threat Intelligence team within Security Operations monitors threats across the organization. The Senior Threat Intelligence Engineer will combine technical expertise in tracking sophisticated adversaries with AI engineering to protect digital assets. This role will turn internal and external signals into durable detections and actionable intelligence, partnering across the organization to support risk-based decisions.
Responsibilities
- Automate the tracking and analysis of sophisticated cyber threats targeting Coinbase’s customers, employees, products, and infrastructure.
- Influence decisions across the organization by reporting and presenting intelligence analysis to stakeholders, partners, and executives.
- Model and curate the shared view of the threat landscape within Vertex Synapse, Coinbase’s Threat Intelligence Platform.
- Elevate analytic quality through critical peer review and strategic feedback.
- Cultivate strategic relationships within Threat Intelligence communities to expand access to information and strengthen the trust network.
- Investigate and deliver on a high volume of intelligence requests by prioritizing, documenting, and reporting timely and accurate information.
- Serve as a subject matter expert on the latest cyber threats and risks facing Coinbase, cryptocurrency, and the broader financial industry.
Requirements
- 5+ years of experience in operational threat intelligence, incident response, security research, or cyber investigations.
- Proficiency in at least one programming language, such as Python or Go, and SQL for data analysis, scripting, or tooling development.
- Proven ability to translate complex technical threat analysis into clear, actionable intelligence briefs for technical and executive audiences.
- Track record of independently identifying high-priority threats, self-directing investigations, and building solutions with minimal oversight.
- Skill in conducting open-source intelligence (OSINT) research across a wide range of topics.
- Ability to use generative AI responsibly, maintain human oversight, deliver business-ready outputs, and improve workflow efficiency, cost, and quality.
Compensation
Annual base salary range, excluding equity and bonus: $180,370–$212,200 USD. Total compensation may also include equity, bonus eligibility, and medical, dental, vision, and 401(k) benefits.
Position ID: P78320.