Threat Intelligence Platform Engineer at Coinbase

About the Role

Are you ready to do the most impactful work of your career at Coinbase? We are uncompromising on our mission to increase economic freedom. At Coinbase, the bar is high and the environment is intense, and we appreciate that. This is not a place for complacency; it is a place to be continually pushed past your perceived limits.

If you are ready to build the future of finance alongside a team that refuses to settle for "good enough," you belong here. Coinbase operates as a remote-first company, but please note we require attendance at quarterly in person working sessions, known as "surges." Learn more about the Coinbase work environment.

As a Threat Intelligence Platform Engineer within the Threat Intelligence team, you will be responsible for owning Vertex Synapse in production. This platform is critical because it converts adversary intelligence into actionable detections, blocks, and decisions across Coinbase.

The Threat Intelligence team is dedicated to protecting billions of dollars in digital assets. We achieve this by collecting, modeling, and operationalizing intelligence regarding the most sophisticated cyber threats currently targeting the cryptocurrency ecosystem. Your core duties will involve keeping the platform robust and healthy, ingesting and modeling new intelligence sources, and shipping the automations necessary to integrate threat intelligence into the security operations framework at Coinbase.

What You Will Do

• Own the production Vertex Synapse instance, managing platform health, backend operations, cron monitoring, and ensuring data hygiene.
• Build and maintain integrations for intelligence feeds, including enrichment and tagging, to ensure new sources are modeled and usable for stakeholders.
• Ship intelligence into downstream controls and data pipelines, such as detections, blocklists, data warehouses, and agent workflows.
• Partner closely with Security and Product teams to translate complex intelligence requirements into functional production capabilities.
• Rapidly prototype and implement features, fixes, and tooling as needed by the team's Intelligence Analysts and other stakeholders.

Required Skills and Experience

• A minimum of 2 years of experience building and maintaining threat intelligence platforms or security data pipelines within production environments.
• Software development proficiency in Python, Go, and/or Storm, including the ability to deploy production-quality code while owning the CI/CD process after initial shipment.
• Proven experience ingesting, modeling, tagging, and managing the lifecycle of indicators and related intelligence data at a significant scale.
• A demonstrated track record in troubleshooting and restoring production systems and resolving data quality issues, followed by driving root cause analyses to prevent future occurrences.
• Experience translating cross-functional stakeholder needs into effective technical solutions within the context of security operations.
• The ability to utilize generative AI responsibly, maintaining necessary human oversight to deliver business-ready outputs that drive measurable improvements in workflow efficiency, cost, and quality.

Compensation and Logistics

Pay Transparency Notice: Base salary varies based on location. Total compensation may also include eligibility for equity and bonuses, in addition to listed benefits (medical, dental, vision, 401(k)).

Annual Base Salary Range: $144,500 to $170,000 USD.

Employment Details:

• Position ID: P78174
• Application Limit: Candidates may submit a maximum of 3 applications within any 6-month period.

Benefits for U.S. Employees

• Comprehensive Medical Plan, Dental and Vision Plan with generous employee contributions.
• Health Savings Account with company contributions every pay period.
• Disability and Life Insurance coverage.
• 401(k) plan featuring company matching contributions.
• Wellness Stipend.
• Mobile and Internet Reimbursement.
• Volunteer Time Off.
• Fertility Counseling and Benefits.
• Generous Time off and Leave Policy.
• The option to receive payment in digital currency.

Apply now to join the team and help build the future of finance.