Threat Intelligence Platform Engineer — Remote, High Impact

Coinbase, Inc.; Indianapolis (IN); Hybrid; USD 145,000 - 170,000; Full time

Benefits offered by this job

Equity

Bonus eligibility

Medical benefits

Dental benefits

Vision benefits

401(k)

Job summary

Coinbase, Inc. is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, turning adversary intel into detections and actions across security operations.

You will ingest intelligence, model sources, and ship automations that integrate threat intel into Coinbase's security fabric. Collaboration with Security and Product is essential to deliver production capabilities.

Qualifications

• 2+ years building and operating threat intel platforms or security data pipelines in production
• Proficiency in Python, Go, and/or Storm with production-grade CI/CD ownership
• Experience ingesting, modeling, tagging, and lifecycle-managing indicators at scale
• Track record of troubleshooting production systems and data quality issues and root-cause fixes
• Ability to translate cross-functional stakeholder needs into security solutions
• Responsible use of generative AI with human oversight to improve workflows

Responsibilities

• Own the production Vertex Synapse instance, including health, backend operations, cron monitoring, and data hygiene
• Build and maintain intelligence feed integrations, enrichments, and tagging for new sources
• Ship intelligence into downstream controls and data pipelines (detections, blocklists, data warehouses, agent workflows)
• Partner with Security and Product to translate intelligence requirements into production capabilities
• Rapidly prototype and implement features, fixes, and tooling for analysts and stakeholders

Skills

Threat intel platforms

Python

Go

Storm

CI/CD ownership

Data modeling

Troubleshooting

Stakeholder communication

Generative AI

Job description

Coinbase, Inc. is seeking a Threat Intelligence Platform Engineer to own Vertex Synapse in production, turning adversary intel into detections and actions across security operations.

You will ingest intelligence, model sources, and ship automations that integrate threat intel into Coinbase's security fabric. Collaboration with Security and Product is essential to deliver production capabilities.