Threat Intelligence Engineer

About the company

• Coinbase is a remote-first company on a mission to increase economic freedom, with quarterly in-person working sessions called "surges."

Responsibilities

• Automate the tracking and analysis of sophisticated cyber threats targeting Coinbase's customers, employees, products, and infrastructure.
• Influence decisions across the organization by reporting and presenting intelligence analysis to stakeholders, partners, and executives.
• Model and curate the shared view of the threat landscape within Vertex Synapse, the Threat Intelligence Platform.
• Cultivate strategic relationships within Threat Intelligence communities.
• Investigate and deliver on a high volume of intelligence requests.
• Serve as subject matter expert on the latest cyber threats and risks facing Coinbase, crypto, and the broader financial industry.

Requirements

• 5+ years in operational threat intelligence, incident response, security research, or cyber investigations.
• Proficient in at least one programming language (e.g., Python or Go) and SQL for data analysis, scripting, or tooling development.
• Proven ability to translate complex technical threat analysis into clear, actionable intelligence briefs.
• Track record of independently identifying high-priority threats and self-directing investigations.
• Skilled in conducting open-source intelligence (OSINT) research.
• Utilizes generative AI responsibly, maintaining human oversight.

Conditions

• Annual base salary range: $180,370 — $212,200 USD, plus equity and bonus eligibility and benefits (medical, dental, vision, 401(k)).
• Remote-first, but not remote-only; quarterly in-person surges.