Specialist, CSIRT

at Coinbase

📍 India

INR 2,755,300 per year

MIDDLE

✅ Remote

Tech Stack
Tag name is followed by "@" symbol and proficiency level value. About proficiency levels:

1-2 — basic awareness. Minimal hands-on experience, and a rudimentary understanding of the technology's purpose;

3-6 — daily use. Comfortable and regular usage, capable of handling common tasks and challenges related to the technology;

7-9 — you are an expert, you can teach others, you know all the pitfalls and tricks;

10 — exceptional knowledge, comprehensive understanding, and adeptness in all aspects of the technology, including advanced problem-solving. Think twice before claiming or demanding such level.

AI @ 3 Bash @ 5 GenAI Generative AI @ 3 Linux @ 3 Networking @ 3 Python @ 5 Security @ 5 Web3 macOS @ 3

Details

Coinbase is a remote-first, but not remote-only company. Employees are expected to meet quarterly for in-person working sessions called “surges.”

As a Security Operations Specialist on the Security Operations team, you will defend Coinbase and its customers against sophisticated attackers. The team spans CDRE, Insider Threat, Blockops, and Threat Intelligence, protecting digital assets while scaling security coverage for Coinbase’s global Web3 products.

Responsibilities

Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements.
Build and maintain runbooks for repeatable response patterns.
Define and implement automation to eliminate manual toil.
Partner with Security Operations teams to develop monitoring strategies informed by attacker investigation findings.
Drive security monitoring and incident response for emerging Web3 product launches.
Mentor peers, share knowledge, and participate in 24/7 rotational coverage across time zones.

Requirements

3+ years of hands-on security operations experience, including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments.
Ability to identify detection gaps and build coverage across diverse log sources, including cloud platforms, SaaS applications, container orchestration, and M&A integrations.
Proficiency scripting automation workflows using Python, Bash, or an equivalent language to reduce manual investigation and response time.
Working knowledge of networking fundamentals and Windows, Linux, and macOS operating systems sufficient to analyze host- and network-level artifacts.
Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios.
Ability to use generative AI responsibly, maintaining human oversight while delivering business-ready outputs and improving workflow efficiency, cost, and quality.

Compensation

The target annual base salary is ₹2,755,300 INR, excluding equity and bonus. Total compensation may also include equity, bonus eligibility, and medical, dental, and vision benefits.

Position ID: P77687