Senior Onchain Investigator: Threat Intelligence Lead

Coinbase, Inc.; Denver (CO); Remote; USD 180,000 - 212,000; Full time

Benefits offered by this job

Equity

Bonus eligibility

Medical benefits

401(k)

Job summary

Coinbase is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors in the crypto ecosystem. You will cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections, blocks, and decisions that protect customers and products.

You’ll lead investigation methodology, build pipelines, and work with product, engineering, and risk teams to embed threat mitigation across the development lifecycle.

Qualifications

• 5 years of investigations including 3 years investigating onchain illicit activity
• Deep knowledge of blockchain ecosystems and protocols including tracing across chains and laundering patterns
• Proficient with Python or Go and SQL for data analysis and tooling development
• Track record of creating investigation methods, dashboards, or pipelines
• Ability to translate complex technical analysis into clear, actionable intelligence for executives and technical stakeholders
• OSINT research across a wide range of topics
• Responsible use of generative AI with human oversight to improve workflows

Responsibilities

• Own complex onchain investigations into threat actor infrastructure and abuse targeting Coinbase and Base
• Drive clustering and attribution of illicit actors using blockchain analytics and OSINT
• Build OSINT and onchain analysis pipelines, queries, and dashboards that automate detections
• Lead post-incident reviews and root cause analyses to identify gaps and improve controls
• Partner with product, engineering, and risk teams to embed threat mitigation into the product lifecycle
• Lead new investigative techniques and brief executives with risk, impact, and actions

Skills

Investigations

Onchain expertise

OSINT

Python

Go

SQL

Stakeholder briefing

AI responsibly

Tools

Python

Go

SQL

Job description

Coinbase is seeking a Senior Onchain Investigator to own end-to-end investigations into threat actors in the crypto ecosystem. You will cluster illicit wallets, fuse OSINT with onchain evidence, and turn findings into detections, blocks, and decisions that protect customers and products.

You’ll lead investigation methodology, build pipelines, and work with product, engineering, and risk teams to embed threat mitigation across the development lifecycle.