Senior Onchain Investigator — Remote Threat Intelligence

Coinbase, Inc.; Des Moines (IA); Remote; USD 180,000 - 212,000; Full time

Job summary

Coinbase is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors targeting the crypto ecosystem, clustering illicit wallets, and turning findings into detections and blocks.

You will lead investigation methodology, collaborate with product and risk teams, and build scalable OSINT and onchain pipelines to automate detections and improve security posture.

Qualifications

• 5+ years of investigations including 3+ years onchain activity.
• Deep knowledge of blockchain ecosystems and protocols.
• Proficient with Python or Go and SQL.
• Track record of creating investigation methods or pipelines.
• Ability to translate complex technical analysis into actionable intelligence.
• OSINT research across a wide range.
• Uses generative AI responsibly with human oversight.

Responsibilities

• Own complex onchain investigations into threat actor infrastructure and abuse.
• Drive clustering and attribution of illicit actors using analytics.
• Build OSINT and onchain analysis pipelines and dashboards.
• Lead post-incident reviews and recommend enhancements to controls.
• Partner with product, engineering, and risk teams to embed threat mitigation in development lifecycle.
• Lead new investigative techniques and brief executives with clear risk and actions.

Skills

Onchain investigations

Blockchain analytics

Python/Go

SQL

OSINT research

Executive briefings

Job description

Coinbase is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors targeting the crypto ecosystem, clustering illicit wallets, and turning findings into detections and blocks.

You will lead investigation methodology, collaborate with product and risk teams, and build scalable OSINT and onchain pipelines to automate detections and improve security posture.