Remote Senior Onchain Investigator & Analytics Lead

Coinbase, Inc.; Concord (NH); Remote; USD 180,000 - 212,000; Full time

Job summary

Coinbase is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors targeting the crypto ecosystem. You will cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections and controls.

Expect to lead methodology, develop pipelines and dashboards, and partner with product and engineering teams to embed threat mitigation throughout the lifecycle. Remote-first, with quarterly in-person surges.

Qualifications

• 5+ years of investigations including 3+ years onchain activity or blockchain intelligence.
• Deep knowledge of blockchain ecosystems and cross-chain tracing.
• Proficient in Python or Go and SQL for data analysis and tooling.
• Track record of investigation methods, dashboards, or pipelines adopted by others.
• Ability to translate complex analyses into actionable intel for technical and non-technical stakeholders.
• OSINT research across diverse topics.
• Responsible use of generative AI with human oversight.

Responsibilities

• Own complex onchain investigations into threat actor infrastructure and abuse targeting Coinbase and Base.
• Drive clustering and attribution of illicit actors using blockchain analytics and OSINT.
• Build OSINT and onchain analysis pipelines, queries, and dashboards for detections.
• Lead post-incident reviews and identify gaps to enhance controls and detection.
• Partner with product, engineering, and risk teams to embed threat mitigation in product lifecycle.
• Lead new investigative techniques and brief executives with clear risk and actions.

Skills

Onchain investigations

Blockchain analytics

Python or Go

SQL for data analysis

OSINT research

Executive briefings

AI with human oversight

Tools

Vertex Synapse

Job description

Coinbase is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors targeting the crypto ecosystem. You will cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections and controls.

Expect to lead methodology, develop pipelines and dashboards, and partner with product and engineering teams to embed threat mitigation throughout the lifecycle. Remote-first, with quarterly in-person surges.