Senior Threat Intel Engineer — Remote & AI-Driven Security

Coinbase, Inc.; Phoenix (AZ); Remote; USD 180,000 - 212,000; Full time

Job summary

Coinbase is seeking a Senior Threat Intelligence Engineer to join the Security Operations team. You will automate threat tracking, analyze adversaries, and turn signals into durable detections to protect billions in digital assets.

You'll report to stakeholders, collaborate across the organization, and help shape risk-based decisions. The role requires 5+ years in threat intelligence, programming skills in Python or Go, and strong OSINT capabilities. Remote-first with quarterly in-person surges.

Qualifications

• 5+ years in operational threat intelligence, incident response, security research, or cyber investigations.
• Proficient in at least one programming language (e.g., Python or Go) and SQL for data analysis, scripting, or tooling development.
• Proven ability to translate complex technical threat analysis into clear, actionable intelligence briefs for technical and executive audiences.
• Track record of independently identifying high-priority threats, self-directing investigations, and building solutions with minimal oversight.
• Skilled in conducting open-source intelligence (OSINT) research across a wide range of topics.

Responsibilities

• Automate the tracking and analysis of sophisticated cyber threats targeting Coinbase's customers, employees, products, and infrastructure.
• Influence decisions across the organization by reporting and presenting intelligence analysis to stakeholders, partners, and executives.
• Model and curate our shared view of the threat landscape within Vertex Synapse, our Threat Intelligence Platform, while elevating analytic quality through critical peer review and strategic feedback.
• Cultivate strategic relationships within Threat Intelligence communities to expand access to information and strengthen our trust network.
• Investigate and deliver on a high volume of intelligence requests by prioritizing, documenting, and reporting timely and accurate information.
• Serve as subject matter expert on the latest cyber threats and risks facing Coinbase, crypto, and the broader financial industry

Skills

Threat intelligence

Python/Go

SQL

OSINT

Generative AI

Tools

Vertex Synapse

Job description

Coinbase is seeking a Senior Threat Intelligence Engineer to join the Security Operations team. You will automate threat tracking, analyze adversaries, and turn signals into durable detections to protect billions in digital assets.

You'll report to stakeholders, collaborate across the organization, and help shape risk-based decisions. The role requires 5+ years in threat intelligence, programming skills in Python or Go, and strong OSINT capabilities. Remote-first with quarterly in-person surges.