Threat Intelligence Platform Engineer

About the company

• Coinbase is a remote-first company on a mission to increase economic freedom.
• Quarterly in-person working sessions called "surges".

Responsibilities

• Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene.
• Build and maintain intelligence feed integrations, enrichments, and tagging.
• Ship intelligence into downstream controls and data pipelines, including detections, blocklists, data warehouses, and agent workflows.
• Partner across Security and Product to translate intelligence requirements into production capabilities.
• Rapidly prototype and implement features, fixes, and tooling.

Requirements

• 2+ years building and operating threat intelligence platforms or security data pipelines in production environments.
• Software development experience in Python, Go, and/or Storm, including deploying production-quality code with CI/CD ownership.
• Experience ingesting, modeling, tagging, and lifecycle-managing indicators and intelligence data at scale.
• Track record of troubleshooting and restoring production systems and data quality issues.
• Experience translating cross-functional stakeholder needs into technical solutions within a security operations context.
• Utilizes generative AI responsibly with human oversight.

Conditions

• Annual base salary range: $144,500 — $170,000 USD (excluding equity and bonus).
• Total compensation may include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).