Senior Onchain Investigator: Blockchain Threat Intel

Coinbase, Inc.; Saint Paul (MN); Remote; USD 180,000 - 212,000; Full time

Job summary

Coinbase is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors targeting Coinbase and the crypto ecosystem. You will cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections, blocks, and decisions that protect customers and products.

In this role, you will lead investigation methodology across the team, partner with product and engineering, and communicate risk and actions to executives.

Qualifications

• 5+ years of investigations experience, including onchain activity or crypto abuse.
• Deep knowledge of blockchain ecosystems, tracing across chains and laundering patterns.
• Proficiency with Python or Go and SQL for data analysis and tooling.
• Experience creating reusable investigation methods, dashboards, or pipelines.
• Ability to translate complex technical analysis into clear, actionable intelligence for technical and non-technical stakeholders.

Responsibilities

• Own complex onchain investigations into threat actor infrastructure and abuse.
• Drive clustering and attribution of illicit actors using blockchain analytics and OSINT.
• Build OSINT and onchain analysis pipelines, queries, and dashboards to automate detections.
• Lead post-incident reviews and recommend enhancements to controls and detection.
• Partner with product, engineering, and risk teams to embed threat mitigations in the product lifecycle.
• Lead new investigative techniques and brief executives with clear risk and actions.

Skills

Investigations

Blockchain analytics

OSINT

Python/Go

SQL

Executive briefings

Tools

Vertex Synapse

Job description

Coinbase is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors targeting Coinbase and the crypto ecosystem. You will cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections, blocks, and decisions that protect customers and products.

In this role, you will lead investigation methodology across the team, partner with product and engineering, and communicate risk and actions to executives.