Senior Threat Intelligence Engineer — Remote-First Impact

Triwill Group; Northern (KY); Hybrid; USD 180,000 - 212,000; Full time

Job summary

Coinbase is seeking a Senior Threat Intelligence Engineer to combine deep technical expertise with AI-driven approaches to protect billions in digital assets. You will translate complex threat signals into actionable intelligence for stakeholders and work across teams to influence risk decisions.

This is a remote-first role with quarterly in-person surges. Responsibilities include automating threat tracking, producing executive-friendly briefs, and building a trusted threat intelligence program

Qualifications

• 5+ years in operational threat intelligence, incident response, security research, or cyber investigations.
• Proficient in programming (Python or Go) and SQL for data analysis.
• Able to translate complex threat analysis into clear intelligence briefs for technical and executive audiences.
• Track record of independently identifying high-priority threats and driving investigations with minimal oversight.
• Skilled in OSINT research across topics.
• Aware of responsible use of generative AI with human oversight.

Responsibilities

• Automate tracking and analysis of cyber threats targeting Coinbase’s customers, employees, products, and infrastructure.
• Influence decisions by reporting intelligence to stakeholders and executives.
• Model and curate threat landscape in Vertex Synapse, and improve analytic quality through peer review.
• Build strategic relationships within Threat Intelligence communities to expand information access.
• Investigate and deliver on high volumes of intelligence requests with timely, accurate reporting.
• Serve as SME on latest cyber threats and risks facing Coinbase and the crypto industry.

Skills

Python/Go

SQL

Threat intel

OSINT

AI tooling

Tools

Vertex Synapse

Job description

Coinbase is seeking a Senior Threat Intelligence Engineer to combine deep technical expertise with AI-driven approaches to protect billions in digital assets. You will translate complex threat signals into actionable intelligence for stakeholders and work across teams to influence risk decisions.

This is a remote-first role with quarterly in-person surges. Responsibilities include automating threat tracking, producing executive-friendly briefs, and building a trusted threat intelligence program