Remote Threat Intelligence Platform Engineer

Coinbase, Inc.; Lansing (MI); Hybrid; USD 145,000 - 170,000; Full time

Job summary

Coinbase, Inc. is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, turning intelligence into detections and actions across Coinbase's security operations.

You will build feeds, enrichments, and tagging to land sources as usable models, and ship intelligence into data pipelines and downstream controls, collaborating with Security and Product to deliver capabilities. This role emphasizes responsible AI use and production-grade software practices.

Qualifications

• 2+ years building and operating threat intelligence platforms or security data pipelines in production environments.
• Experience with Python, Go, and Storm, including deploying production-quality code with CI/CD ownership.
• Experience ingesting, modeling, tagging, and lifecycle-managing indicators at scale.
• Troubleshooting and root-cause analysis to prevent recurrence.
• Ability translate stakeholder needs into technical security solutions.
• Responsible use of generative AI with human oversight to improve workflows.

Responsibilities

• Own the production Vertex Synapse instance and ensure platform health.
• Build and maintain intelligence feed integrations, tagging and land new sources modeled for users.
• Ship intelligence into downstream controls and data pipelines (detections, blocks, data warehouses, agent workflows).
• Partner with Security and Product to translate intelligence requirements into production capabilities.
• Prototype and implement features, fixes, and tooling for Analysts and stakeholders.

Skills

Threat intelligence

Python

Go

Storm

CI/CD ownership

Data modeling

Troubleshooting

Stakeholder communication

Generative AI usage

Tools

CI/CD tooling

Storm

Job description

Coinbase, Inc. is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, turning intelligence into detections and actions across Coinbase's security operations.

You will build feeds, enrichments, and tagging to land sources as usable models, and ship intelligence into data pipelines and downstream controls, collaborating with Security and Product to deliver capabilities. This role emphasizes responsible AI use and production-grade software practices.