Remote Threat Intelligence Platform Engineer - Synapse

Coinbase; Northern (KY); Hybrid; USD 145,000 - 170,000; Full time

Benefits offered by this job

Equity

Bonus eligibility

Medical benefits

Dental benefits

Vision benefits

401(k)

Job summary

Coinbase is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, ensuring platform health, data quality, and scalable intelligence processing. You will contribute to integrations, tagging, and downstream data flows that power detections and decision-making across the security operations stack.

This role requires hands-on development experience in Python, Go, or Storm, with CI/CD ownership, and a proven ability to translate security needs into platform

Qualifications

• 2+ years building threat intel platforms in production.
• Python, Go, or Storm with production-grade code deployment.
• Experience ingesting, modeling, tagging, and lifecycle-managing indicators at scale.
• Troubleshooting production systems and driving root-cause fixes.
• Translating stakeholder needs into security solutions.

Responsibilities

• Own the production Vertex Synapse instance, including platform health and data hygiene.
• Build and maintain intelligence feed integrations and tagging for sourced data.
• Ship intelligence into downstream controls and data pipelines (detections, blocklists, data warehouses).
• Collaborate with Security and Product to translate intel requirements into production capabilities.
• Prototype and implement features and tooling per Analysts' needs.

Skills

Threat intel platforms

Python

Go

Storm

CI/CD ownership

Data modeling

Security operations

AI governance

Tools

Vertex Synapse

CI/CD pipelines

Job description

Coinbase is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, ensuring platform health, data quality, and scalable intelligence processing. You will contribute to integrations, tagging, and downstream data flows that power detections and decision-making across the security operations stack.

This role requires hands-on development experience in Python, Go, or Storm, with CI/CD ownership, and a proven ability to translate security needs into platform