Threat Intelligence Platform Engineer — Remote

Coinbase, Inc.; Cheyenne (WY); Remote; USD 145,000 - 170,000; Full time

Job summary

Coinbase is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, turning adversary intelligence into detections and decisions across Coinbase Security Operations. You will keep the platform healthy, ingest and model new intelligence sources, and ship automations that weave threat intelligence into security workflows.

Collaborate with Security and Product to translate intelligence requirements into production capabilities, rapidly prototyping features and tooling

Qualifications

• 2+ years building and operating threat intelligence platforms or security data pipelines in production environments.
• Experience in ingesting, modeling, tagging, and lifecycle-managing indicators at scale.
• Ability to translate stakeholder needs into production capabilities within security operations.

Responsibilities

• Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene.
• Build and maintain intelligence feed integrations, enrichments, and tagging so new sources land modeled and usable by stakeholders.
• Ship intelligence into downstream controls and data pipelines, including detections, blocklists, data warehouses, and agent workflows.
• Partner across Security and Product to translate intelligence requirements into production capabilities.
• Rapidly prototype and implement features, fixes, and tooling as required by the team's Intelligence Analysts and stakeholders.

Skills

Vertex Synapse

Threat intel platforms

CI/CD ownership

Data modeling

Security operations

Cross-functional collaboration

Tools

Python

Go

Storm

Job description

Coinbase is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, turning adversary intelligence into detections and decisions across Coinbase Security Operations. You will keep the platform healthy, ingest and model new intelligence sources, and ship automations that weave threat intelligence into security workflows.

Collaborate with Security and Product to translate intelligence requirements into production capabilities, rapidly prototyping features and tooling