Senior Security Engineer, Corporate Security

VulnU; United States; Remote; USD 186,000 - 219,000; Full time

Job summary

Coinbase Corporate Security (CorpSec) seeks a Senior Security Engineer to design, implement, and maintain security controls for corporate endpoints including macOS, Chromebooks, and mobile devices. You will collaborate with IT and engineering to reduce risk while maintaining user productivity.

In this role, you’ll review enterprise systems, integrate endpoint and SaaS security into broader initiatives, and address data exfiltration risks from AI agents and developer tools.

Qualifications

• 5+ years in security engineering, with at least 2 years securing macOS or similar user endpoints in an enterprise environment.
• Proven ability to write production code (services, integrations, automations) that supports corporate infrastructure security.
• Experience scoping, prioritizing, and shipping security projects end-to-end in fast-moving environments.
• Familiarity with device trust, zero trust network access, or endpoint security products (e.g., Cloudflare, Prisma Access, Zscaler).
• Utilizes generative AI responsibly, with human oversight to deliver business-ready outputs and improved workflows.

Responsibilities

• Design, implement, and maintain security solutions to harden Coinbase's macOS, Chromebook, and mobile endpoints, focusing on secure configurations, compliance, threat detection, and user experience.
• Perform security reviews on enterprise systems and software that enable user productivity across the corporate environment.
• Collaborate with cross-functional partners to integrate endpoint and SaaS security into broader corporate engineering initiatives.
• Identify and close data exfiltration paths introduced by local AI agents and developer tooling running on corporate endpoints.
• Provide technical guidance and code review support to engineers on the CorpSec team, raising the security bar across the organization.

Skills

macOS security

Endpoint security

Production code

Security project management

Zero trust

AI governance

Tools

Cloudflare

Prisma Access

Zscaler

Job description

# Senior Security Engineer, Corporate SecurityCoinbase · coinbase.comCategory: Security EngineeringLocation: RemoteLevel: Senior## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* EquityReady to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for \"good enough,\" you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.Coinbase Corporate Security (CorpSec) is seeking a Senior Security Engineer to build and maintain security controls that protect corporate infrastructure, user devices, enterprise applications, and network communications. You'll partner closely with IT and engineering teams to identify risks and ship tailored solutions that keep users secure without introducing unnecessary friction, directly protecting Coinbase's most sensitive data and critical assets.What you'll do:Design, implement, and maintain security solutions to harden Coinbase's macOS, Chromebook, and mobile endpoints, focusing on secure configurations, compliance, threat detection, and user experience.Perform security reviews on enterprise systems and software that enable user productivity across the corporate environment.Collaborate with cross-functional partners to integrate endpoint and SaaS security into broader corporate engineering initiatives.Identify and close data exfiltration paths introduced by local AI agents and developer tooling (e.g., coding assistants, LLM harnesses) running on corporate endpoints.Provide technical guidance and code review support to engineers on the CorpSec team, raising the security bar across the organization.Required Skills and Experience:5+ years of experience in security engineering, with at least 2 years securing macOS or similar user endpoints in an enterprise environment.Proven ability to write production code (services, integrations, automations) that supports corporate infrastructure security.Experience scoping, prioritizing, and shipping security projects end-to-end with minimal direction in fast-moving environments.Familiarity with device trust, zero trust network access, or endpoint communication security products (e.g., Cloudflare, Prisma Access, Zscaler).Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.Position ID: (for referrals)#LI-RemotePay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).Annual base salary range (excluding equity and bonus):$186,065 $218,900 USDApplication Limit: Candidates may submit a maximum of 3 applications within a 6-month period.Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.Data Privacy Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.