Security Infrastructure Engineer

Coinbase; United States; Remote; USD 152,000 - 180,000; Full time

Job summary

Coinbase is seeking a passionate security engineer to enhance security controls and advise on secure architecture for its cloud platforms. This role demands expertise in GCP and a commitment to building a safer financial system. Join a team dedicated to innovation and excellence in cloud security.

Benefits

Target bonus

Target equity

Medical benefits

Dental benefits

Vision benefits

401(k) plan

Qualifications

• At least 2 years of experience in cloud security with deep expertise in GCP.
• Support for bridging security controls between AWS and GCP.
• Experience deploying cloud infrastructure with Terraform.

Responsibilities

• Develop threat models for cloud and compute platforms.
• Review configuration changes and write policies.
• Build guardrails for cloud and compute platforms.

Skills

Cloud Security

GCP Expertise

Terraform

Golang

Execution-focused mindset

Passion for open financial systems

Job description

Ready to be pushed beyond what you think you’re capable of?

At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform — and with it, the future global financial system.

To achieve our mission, we’re seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company’s hardest problems.

Our work culture is intense and isn’t for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there’s no better place to be.

Coinbase Cloud Security (CloudSec) is seeking a security engineer to build security controls and advise engineering teams on secure architecture requirements and best practices. CloudSec is responsible for the safety of cloud and compute platforms on which Coinbase applications are built. As an engineer on the CloudSec team, you will be a trusted expert on the security of these platforms. Your responsibilities include security consultations, configuration reviews, policy-as-code, and developing guardrails and automation.

Key responsibilities include:

1. Develop threat models for cloud and compute paved roads to identify security risks.
2. Apply your expert knowledge of security best practices for GCP to inform remediations and the team’s control roadmap.
3. Review configuration changes and write policies to detect security invariants.
4. Build guardrails to make cloud and compute platforms safe by default.
5. Write code for automations that support security requirements like threat detection, incident containment, and network access management.
6. Partner with engineering teams to review cloud and compute architecture design changes.

Qualifications:

• At least 2 years of experience in cloud security with deep expertise in GCP.
• Support for bridging security controls between AWS and GCP.
• Experience deploying cloud infrastructure with Terraform and developing automations or guardrails with Golang.
• Execution-focused mindset, capable of navigating ambiguity and delivering results.
• Passion for building an open financial system that brings the world together.

Nice to have:

• Experience writing rego rules for Open Policy Agent (OPA) or similar policy as code implementations.
• Experience with detection platforms like Wiz, GCP Cloud Asset Inventory.
• Advanced cloud security certifications such as AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer.

Position ID: P63725

Pay Transparency: The target annual salary ranges from $152,405 to $179,300 USD, depending on location. Full-time offers include target bonus, target equity, and benefits (medical, dental, vision, 401(k)).

Please note that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to evaluate how your skills and interests align with Coinbase's roles before applying.

Equal Opportunity Statement:

Coinbase is committed to diversity and is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender identity or expression, sexual orientation, or other protected status. We also consider qualified applicants with criminal histories in accordance with applicable laws.

For US applicants, you may view the Know Your Rights notice. Coinbase participates in the E-Verify program where required. We provide reasonable accommodations for individuals with disabilities; contact us at accommodations[at]coinbase.com.

Our Global Data Privacy Notice details how we handle applicant data, applicable under GDPR and CCPA. By submitting your application, you agree to the data processing policies outlined here. US applicants also agree to arbitration of disputes as described here.