Easy Apply
Easy Apply
Perform second-line triage and incident response, lead investigations and post-incident improvements, build runbooks and automation, tune detection across cloud/SaaS/container environments, support Web3 product launches, and mentor peers while participating in 24/7 rotational coverage.
Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
As a Security Operations Specialist on the Security Operations team, you'll defend Coinbase and its customers against some of the most sophisticated attackers in the world. This team - spanning CDRE, Insider Threat, Blockops and Threat Intelligence - protects billions of dollars in digital assets while scaling security coverage for the next billion crypto users. You'll own frontline incident response, build detection and automation capabilities, and partner across the organization to keep Coinbase safe as it launches new Web3 products globally.
What you'll do:
- Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements
- Build and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil
- Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings
- Drive Security monitoring and incident response for emerging Web3 product launches
- Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones
Required Skills and Experience:
- 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments
- Demonstrated ability to identify detection gaps and build coverage across diverse log sources (cloud platforms, SaaS applications, container orchestration, M&A integrations)
- Proficiency scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent)
- Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts
- Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Position ID: P77687
#LI-Remote
Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).
Annual base salary range (excluding equity and bonus):
₹2,755,300—₹2,755,300 INR
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
Similar Jobs at Coinbase
.png)
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Architect and develop scalable security platform services using Golang or Java. Define technical roadmaps, manage projects, collaborate with cross-functional stakeholders, write and review well-tested code, debug complex backend systems, improve operational reliability, and mentor engineers. The role focuses on security, compliance, privacy, secrets and key management, identity access management, vulnerabilities, and onchain security capabilities.
Top Skills:
Cloud TechnologyGenerative AiGoJavaService-Oriented Architecture
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Design and implement a unified orchestration layer coordinating vendor and internal LLMs and human agents. Build production-grade Python services, drive ML projects from design to delivery, ensure secure, scalable AI-enabled customer experiences, and collaborate across teams to meet security, compliance, and performance standards.
Top Skills:
Aws BedrockDeep LearningGoogle AdkLanggraphLangsmithLlmsPythonVertex Ai
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Design and build machine learning systems for Coinbase, responsibly use generative AI tools and copilots, apply human-in-the-loop practices, and deliver measurable efficiency, cost, and quality improvements while collaborating in a remote-first environment with periodic in-person surges.
Top Skills:
GeminiGenerative AiGleanLibrechat
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
