Remote-First Threat Intelligence Platform Engineer

Coinbase Bridge; United States; Hybrid; USD 145,000 - 170,000; Full time

Job summary

Coinbase is a remote-first, not remote-only company focused on increasing economic freedom. The Threat Intelligence Platform Engineer will own Vertex Synapse in production, transforming adversary intelligence into detections, blocks, and decisions across the organization.

You will ingest and model new intelligence sources, maintain platform health, and ship automations that weave threat intelligence into security operations at Coinbase.

Qualifications

• 2+ years building and operating threat intelligence platforms or security data pipelines in production.
• Proficiency with Python, Go, and/or Storm and deploying production-quality code with CI/CD ownership.
• Experience ingesting, modeling, tagging, and lifecycle-managing indicators at scale.
• Strong troubleshooting of production systems and data quality issues with root-cause fixes.
• Ability to translate cross-functional stakeholder needs into technical security solutions.
• Responsible use of generative AI with human oversight to improve workflow efficiency and quality.

Responsibilities

• Own the production Vertex Synapse instance, ensuring health and data hygiene.
• Build and maintain intelligence feed integrations, enrichments, and tagging for usable landings.
• Ship intelligence into detections, blocklists, and data pipelines across systems.
• Collaborate with Security and Product to translate intelligence requirements into capabilities.
• Prototype and implement features and tooling for Intelligence Analysts and stakeholders.

Skills

Threat intelligence platform

Python

Go

Storm

CI/CD

Data pipelines

Tools

CI/CD pipelines

Job description

Coinbase is a remote-first, not remote-only company focused on increasing economic freedom. The Threat Intelligence Platform Engineer will own Vertex Synapse in production, transforming adversary intelligence into detections, blocks, and decisions across the organization.

You will ingest and model new intelligence sources, maintain platform health, and ship automations that weave threat intelligence into security operations at Coinbase.