Remote (USA) senior software engineering role responsible for architecting and executing cryptographic infrastructure and certificate management (PKI, X.509, CAs). Requires 5+ years building highly available distributed systems, experience with HSM/cloud KMS, strong systems programming (Golang/Java/C++/Rust), and operating critical Tier-0 infrastructure. Role includes cross-functional leadership, mentoring, and quarterly in-person "surges."

Regional Security Manager, APAC responsible for owning the APAC physical security operating plan, risk register, site security standards, and remediation across multiple countries and sites. Role includes site assessments, security system deployments, incident command for major events, governance of access control/badging/visitor management, vendor SLAs/KPIs/QBRs, and development of regional policies, SOPs, playbooks, and exercises. Requires 8+ years in physical security with 5+ years leading APAC regional programs.

Remote (USA) Senior Security Engineer role on Coinbase's Corporate Security team. Responsibilities include designing, implementing, and maintaining security controls for endpoints and corporate infrastructure; performing security reviews of enterprise systems; integrating endpoint and SaaS security with engineering initiatives; and addressing data exfiltration risks from local AI agents and developer tooling. Requires 5+ years in security engineering (including 2+ years securing macOS or similar endpoints). Annual base salary range: $186,065–$218,900 USD.

Coinbase Corporate Security is hiring a Security Engineer to design, implement, and maintain security solutions for corporate macOS, Chromebook, and mobile endpoints; perform security reviews of enterprise systems; integrate endpoint and SaaS security with engineering initiatives; and close data exfiltration paths introduced by local AI agents and developer tooling. Requires 3+ years in security engineering (including at least 2 years securing macOS or similar endpoints) and the ability to write production code. Annual base salary range: $152,405–$179,300 USD.

Senior Analyst on the Risk Analytics team focused on end-to-end controls for ATO and scam prevention, defining risk success metrics, building reporting frameworks, conducting SQL/Python-based analyses, and investigating fraudulent activity. Requires 6+ years risk experience (including 2+ years focused on ATO/scams). Annual base salary range: $167,280–$196,800 USD.

Remote (USA) senior role requiring 5+ years in operational threat intelligence, incident response, security research, or cyber investigations. Responsibilities include automating threat tracking and analysis, modeling the threat landscape in the company’s Threat Intelligence Platform, conducting OSINT, delivering intelligence briefs to technical and executive stakeholders, and responsibly applying generative AI. Annual base salary range: $180,370–$212,200 USD.

Lead complex onchain investigations into threat actor infrastructure, scams, exploits, and crypto abuse targeting Coinbase. Perform wallet clustering and attribution using blockchain analytics and OSINT, build analysis pipelines/queries/dashboards, operationalize results into controls, lead post-incident reviews, and brief stakeholders. Requires 5+ years of investigations (including 3+ years onchain), proficiency with Python or Go and SQL, and deep blockchain knowledge.

Role owns the end-to-end technical strategy for Identity & Access Management (human, AI agent, service/workload identities) and sets architecture and standards across multiple pods and hundreds of consuming teams. Responsibilities include driving adoption and migration for 700+ systems, defining shared primitives for authentication/authorization/provisioning/governance, translating audit and regulatory requirements (UAR, SOX, SOC 2) into automated controls and evidence, designing data models and tooling to answer access questions, and mentoring senior engineers. Required: 12+ years software engineering experience, senior technical leadership across multi-team platforms, production Go experience, distributed systems design on AWS, and fluency in identity protocols (OAuth 2.0, OIDC, SAML, SCIM).

As a Threat Intelligence Platform Engineer you will own the production Vertex Synapse instance, manage platform health and data hygiene, build/feed integrations and enrichments, ship intelligence into detections, blocklists and data pipelines, and partner with Security and Product to translate intelligence needs into production capabilities. Role requires 2+ years building/operating threat intelligence platforms or security data pipelines and software development experience in Python, Go, and/or Storm.

Manage and grow a team delivering second-line advisory GRC coverage for technology and security domains (e.g., DR/resiliency, SDLC, AI, IAM, supply chain). Responsibilities include assessing risk and control effectiveness, partnering with engineering and security teams, driving remediation and governance improvements, coordinating with audit and policy teams, and enabling leadership decision-making. Base salary range: $193,970–$228,200 USD/year.

Coinbase is hiring a Staff Software Engineer for the Security Platform team to architect and build platform services (secrets and key management, IAM, onchain security, policy and risk, vulnerabilities). The role requires designing scalable systems with cloud technologies, writing well-tested code, mentoring engineers, managing project priorities, and ensuring operational integrity. Minimum 8+ years software engineering experience; listed base salary is INR 9,424,500 per year.

Join Coinbase's Security Platform Engineering team to architect and build platform services for security, compliance, and privacy use cases (secrets and key management, identity and access management, onchain security, policy and risk management, vulnerabilities management). Responsibilities include designing scalable systems, developing services in Golang/Java, mentoring engineers, writing well-tested code, and collaborating on product and technical roadmaps. Position is remote-first (India) with quarterly in-person working sessions. Annual base salary listed: ₹4,408,400.

Coinbase is hiring a Product Security Engineer to build, deploy, and maintain AI-augmented security scanners, lead red teaming of internal AI systems (prompt injection, jailbreak testing), and develop automation for vulnerability triage and remediation. Requires 3+ years' experience in application security/pen testing/offensive security, proficiency in a language such as Python or Go, and hands-on experience using LLMs/frontier models. Location: Remote - Canada. Reported base salary: 154,000 CAD/year.

Responsible for end-to-end design, implementation, and operation of authentication and authorization capabilities (OAuth, sessions, tokens, 2FA, passkeys) across Coinbase products. Requires 5+ years backend engineering experience, strong proficiency in Go or similar, experience with gRPC/Protocol Buffers, data stores like Redis or DynamoDB, and operating production distributed services with observability and SLOs.

Owning second-line triage and incident response, building runbooks and automation to reduce manual toil, partnering across Security Operations to develop monitoring strategies, driving security monitoring for Web3 launches, participating in 24/7 rotational coverage, and mentoring peers. Requires 3+ years in security operations, hands-on incident response and forensics across cloud/SaaS/container environments, scripting (Python/Bash), SIEM and threat intelligence experience.

Lead design, implementation, and operation of foundational authentication and authorization capabilities (OAuth, OpenID Connect, JWTs, sessions, 2FA, passkeys, device-aware auth). Build and run low-latency Go/gRPC services with strong observability and SLOs, partner with product/security/fraud/infrastructure, and mentor engineers. Requires 8+ years backend experience. Annual base salary range: $218,025–$256,500 USD.

Lead architecture and execution of critical cryptographic infrastructure (including MPC, KMS, HSM) for Coinbase's Tier-0 custody systems. Build highly available, low-latency distributed services, define multi-quarter technical strategy, own secure implementation of cryptographic protocols in a zero-trust environment, and drive cross-functional alignment. Requires 8+ years software engineering experience and deep applied cryptography expertise; experience with Golang, Java, C++, or Rust is expected.