Specialist, CSIRT
Coinbase · Posted Sep 28
Cryptocurrency exchange, digital wallet, custody, and blockchain infrastructure services
Get a personal compatibility score
Add a resume for personal matches
About the role
Coinbase's Security Operations team — spanning CDRE, Insider Threat, Blockops and Threat Intelligence — defends Coinbase and its customers against sophisticated attackers while protecting billions of dollars in digital assets. The team scales security coverage across cloud, SaaS, and container environments for the next billion crypto users. As a Security Operations Specialist, you will own frontline incident response, build detection and automation capabilities, and partner across the organization as Coinbase launches new Web3 products globally.
What you will do
- Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements
- Build and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil
- Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings
- Drive Security monitoring and incident response for emerging Web3 product launches
- Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones
Skills used in this role
What the employer is looking for
- 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments
- Demonstrated ability to identify detection gaps and build coverage across diverse log sources (cloud platforms, SaaS applications, container orchestration, M&A integrations)
- Proficiency scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent)
- Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts
- Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Benefits and support
- equity
- bonus eligibility
- medical, dental, and vision benefits
About Coinbase
Coinbase is a leading financial technology company that operates a secure online platform for buying, selling, transferring, and storing digital assets. Serving retail consumers, institutional investors, and developers worldwide, the company provides comprehensive exchange capabilities, institutional custody services, and scalable blockchain infrastructure like the Base network. Its mission is to increase economic freedom around the world by building the foundational financial rails for the cryptoeconomy.
- Industry
- Cryptocurrency
- Company size
- 4300+ employees
- Founded
- June 2012
- Location
- San Francisco, California, USA
- Funding stage
- Public Company
Funding
Public Company · $547M raised
- 2025-12-19Post IPO Equity$2.6B
- 2021-08-13Post IPOUndisclosed
- 2021-05-17Post IPO$1.25B
- 2020-07-01Series U$75M
- 2018-10-01Series E$300M
Leadership
Co-Founder and Chief Executive Officer
President and Chief Operating Officer
Chief Financial Officer
Recent coverage
Coinbase Blog
Coinbase and Samsung Bring USDC to Samsung Wallet2026-10-08
Coinbase Blog
Coinbase Is Building the Most Complete Trading Platform2026-10-07
CFO Dive
Coinbase CAO to retire as leadership shuffle continues after layoffs2026-10-06