Remote Threat Intelligence Platform Engineer: Defenses

Coinbase, Inc.; Topeka (KS); Remote; USD 145,000 - 170,000; Full time

Job summary

Coinbase, Inc. is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, turning adversary intelligence into detections, blocks, and decisions across Coinbase's security operations.

You will ensure platform health, ingest and model new intelligence sources, and ship automations that weave threat intelligence into security workflows, collaborating with Security and Product to deliver production capabilities.

Qualifications

• 2+ years building and operating threat intel platforms in production.
• Strong Python/Go development skills and CI/CD ownership.
• Experience modeling, tagging, and lifecycle-managing indicators at scale.
• Track record of troubleshooting production systems and driving root-cause fixes.
• Experience translating cross-functional stakeholder needs into security solutions.

Responsibilities

• Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene.
• Build and maintain intelligence feed integrations and tagging so sources land modeled and usable by stakeholders.
• Ship intelligence into downstream controls and data pipelines (detections, blocklists, data warehouses, agent workflows).
• Partner with Security and Product to translate intelligence requirements into production capabilities.
• Rapidly prototype and implement features, fixes, and tooling as required by Analysts and stakeholders.

Skills

Threat intel platforms

Python

Go

Security data pipelines

Stakeholder collaboration

Tools

Storm

CI/CD

Job description

Coinbase, Inc. is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, turning adversary intelligence into detections, blocks, and decisions across Coinbase's security operations.

You will ensure platform health, ingest and model new intelligence sources, and ship automations that weave threat intelligence into security workflows, collaborating with Security and Product to deliver production capabilities.