Remote Threat Intelligence Platform Engineer

Coinbase, Inc.; Phoenix (AZ); Remote; USD 145,000 - 170,000; Full time

Benefits offered by this job

Equity

Bonus eligibility

Medical insurance

Dental insurance

Vision insurance

401(k)

Job summary

Coinbase, Inc. is looking for a Threat Intelligence Platform Engineer to own Vertex Synapse in production, ensuring platform health and scalable ingestion of intelligence. You will land modeled intel into detections, blocks, and pipelines while partnering with Security Operations and Product teams.

You will rapidly prototype features and tooling, translating analyst and stakeholder needs into production capabilities within a remote-first environment that values rigorous security practices.

Qualifications

• 2+ years building and operating threat intel platforms in production.
• Proficient in Python/Go/Storm with production CI/CD ownership.
• Experience modeling indicators at scale and data quality management.
• Strong troubleshooting with root-cause analysis for production systems.
• Ability to translate stakeholder needs into security solutions.
• Responsible use of AI with human oversight to improve workflows.

Responsibilities

• Own the Vertex Synapse production instance and health checks.
• Integrate intelligence feeds, enrichments, and tagging for usable landings.
• Ship intel into detections, blocklists, data warehouses, and workflows.
• Collaborate with Security and Product to translate needs into capabilities.
• Prototype and implement features and tooling for Analysts and stakeholders.

Skills

Threat intel platforms

Python

Go

Data pipelines

CI/CD ownership

Production troubleshooting

Stakeholder collaboration

Generative AI usage

Tools

Storm

Job description

Coinbase, Inc. is looking for a Threat Intelligence Platform Engineer to own Vertex Synapse in production, ensuring platform health and scalable ingestion of intelligence. You will land modeled intel into detections, blocks, and pipelines while partnering with Security Operations and Product teams.

You will rapidly prototype features and tooling, translating analyst and stakeholder needs into production capabilities within a remote-first environment that values rigorous security practices.