Remote-First Threat Intelligence Platform Engineer

Coinbase, Inc.; Austin (TX); Remote; USD 145,000 - 170,000; Full time

Job summary

Coinbase is seeking a Threat Intelligence Platform Engineer on the Threat Intelligence team within Security Operations to own Vertex Synapse in production—the platform that turns adversary intelligence into detections, blocks, and decisions across Coinbase.

You will keep the platform healthy, ingest and model new intelligence sources, and ship automations that weave threat intelligence into security operations at Coinbase.

Qualifications

• 2+ years building and operating threat intelligence platforms or security data pipelines in production environments.
• Experience translating cross-functional stakeholder needs into technical solutions in a security context.
• Proficiency in Python, Go, and/or Storm with production-quality CI/CD ownership.

Responsibilities

• Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene.
• Build and maintain intelligence feed integrations, enrichments, and tagging for modeled sources.
• Ship intelligence into downstream controls and data pipelines, including detections and blocklists.
• Partner with Security and Product to translate intelligence requirements into production capabilities.
• Prototype and implement features, fixes, and tooling for Intelligence Analysts and stakeholders.

Skills

Python

Go

Storm

CI/CD

Threat intelligence

Data pipelines

Job description

Coinbase is seeking a Threat Intelligence Platform Engineer on the Threat Intelligence team within Security Operations to own Vertex Synapse in production—the platform that turns adversary intelligence into detections, blocks, and decisions across Coinbase.

You will keep the platform healthy, ingest and model new intelligence sources, and ship automations that weave threat intelligence into security operations at Coinbase.