Staff Security Engineer, Network Security

Details

Coinbase Cloud Security (CloudSec) is seeking a Staff Security Engineer to enhance network security across multi-cloud environments and on-prem infrastructure. The role focuses on designing, implementing, and continuously improving network security posture while enabling developer efficiency. The position expects in-person participation throughout the year for offsites and collaboration despite being remote-first. Position ID: P72327

Responsibilities

• Design, implement, and maintain network security controls across multi-cloud (AWS, GCP, etc.) and on-prem infrastructure.
• Own and optimize Web Application Firewalls (WAF) and DDoS protection services for scalability and resilience.
• Enforce network segmentation and firewall rules that minimize blast radius without impairing productivity.
• Review configuration changes and write policies to detect security invariants.
• Drive continuous improvement of secure-by-default network patterns for developers.
• Write code for automations that support security requirements such as threat detection, incident containment, and network access management.
• Partner with engineering teams to review network and routing architecture design changes.

Requirements

• At least 8 years of experience in network security with deep expertise in AWS and cloud edge security.
• Ability to deploy cloud infrastructure with Terraform.
• Ability to develop automations or guardrails using Golang.
• Execution-focused mindset capable of navigating ambiguity and delivering results.
• Passion for crypto/blockchain and building an open financial system.

Nice to have

• Proficiency writing Rego rules for Open Policy Agent (OPA) or comparable policy-as-code solutions.
• Experience implementing AWS Network Firewall or GCP Cloud Firewall in large-scale production environments.
• Demonstrated expertise managing Cloudflare.
• Experience with GCP and/or on-premise infrastructure.

Benefits

• Medical, dental, and vision plans with generous employee contributions.
• Health Savings Account with company contributions.
• Disability and life insurance.
• 401(k) plan with company match.
• Wellness stipend, mobile/internet reimbursement, connections stipend.
• Volunteer time off, fertility counseling and benefits.
• Generous time off/leave policy and option to get paid in digital currency.

Other details

• Remote-first role (#LI-Remote). In-person participation required throughout the year for team/company offsites.
• Pay Range: $218,025 — $256,500 USD (target bonus + target equity + benefits may be included in full-time offers).