Senior Onchain Investigator - Remote Security Lead

Coinbase, Inc.; Baton Rouge (LA); Remote; USD 180,000 - 212,000; Full time

Job summary

Coinbase, Inc. is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors targeting Coinbase and the crypto ecosystem.

You will build OSINT and onchain pipelines, lead post-incident reviews, and collaborate with product, engineering, and risk teams to embed threat mitigation into the development lifecycle. This role requires 5+ years in investigations, deep blockchain knowledge, and strong scripting with Python or Go and SQL; we value proactive, clear risk

Qualifications

• 5+ years of investigations including 3+ years investigating onchain illicit activity, cryptocurrency abuse, or blockchain intelligence.
• Deep knowledge of blockchain ecosystems and protocols, including tracing across chains, bridges, mixers, and laundering patterns.
• Proficient with Python or Go and SQL for data analysis, scripting, or tooling development in support of intelligence workflows and automation.
• Track record of creating investigation methods, dashboards, or pipelines that other investigators adopt.
• Proven ability to translate complex technical analysis into clear, actionable intelligence for both technical and non-technical stakeholders, including executive briefings.
• Skilled in conducting open-source intelligence (OSINT) research across a wide range of topics.
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Responsibilities

• Own complex onchain investigations into threat actor infrastructure, scam networks, exploits, and related abuse targeting Coinbase and Base.
• Drive clustering and attribution of illicit actors using blockchain analytics, OSINT, and internal data, then operationalize results into Vertex Synapse and downstream controls.
• Build OSINT and onchain analysis pipelines, queries, and dashboards that automate detections and scale investigative capacity across the team.
• Lead post-incident reviews and root cause analyses to identify gaps and recommend enhancements to controls, detection, and overall security posture.
• Partner with product, engineering, and risk teams to embed threat and abuse mitigation strategies into the product development lifecycle from ideation to launch.
• Lead new investigative techniques, teach them across Security, and brief executives with clear risk, impact, and recommended actions.

Skills

Onchain investigations

Blockchain analytics

OSINT research

Python/Go

SQL

Executive briefs

Tools

Vertex Synapse

Job description

Coinbase, Inc. is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors targeting Coinbase and the crypto ecosystem.

You will build OSINT and onchain pipelines, lead post-incident reviews, and collaborate with product, engineering, and risk teams to embed threat mitigation into the development lifecycle. This role requires 5+ years in investigations, deep blockchain knowledge, and strong scripting with Python or Go and SQL; we value proactive, clear risk