Remote Senior Onchain Investigator - Threat Intel

Coinbase, Inc.; Little Rock (AR); Remote; USD 180,000 - 212,000; Full time

Benefits offered by this job

Equity

Bonus eligibility

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

Coinbase is seeking a Senior Onchain Investigator to own end-to-end onchain investigations, clustering illicit wallets and turning findings into detections that protect customers and products.

You will lead investigation methodology, develop pipelines, and collaborate with product, engineering, and risk teams to embed threat mitigation from ideation to launch. Strong knowledge of blockchains and OSINT is essential.

Qualifications

• 5+ years of investigations including 3+ years investigating onchain illicit activity or blockchain intelligence.
• Deep knowledge of blockchain ecosystems and protocols, including tracing across chains.
• Proficiency with Python or Go and SQL for data analysis and tooling.
• Ability to translate complex technical analysis into clear intelligence for diverse stakeholders.
• Experience creating reusable investigation methods, dashboards, or pipelines.

Responsibilities

• Own complex onchain investigations into threat actor infrastructure and abuse, targeting Coinbase and Base.
• Drive clustering and attribution of illicit actors using blockchain analytics and OSINT.
• Build OSINT and onchain analysis pipelines, queries, and dashboards to automate detections.
• Lead post-incident reviews and root cause analyses to improve controls and security posture.
• Partner with product, engineering, and risk teams to embed threat mitigation in the product lifecycle.
• Lead new investigative techniques and brief executives with risk and recommended actions.

Skills

Onchain investigations

Blockchain analytics

Python/Go

SQL

OSINT

Executive briefings

Job description

Coinbase is seeking a Senior Onchain Investigator to own end-to-end onchain investigations, clustering illicit wallets and turning findings into detections that protect customers and products.

You will lead investigation methodology, develop pipelines, and collaborate with product, engineering, and risk teams to embed threat mitigation from ideation to launch. Strong knowledge of blockchains and OSINT is essential.