.png)
Easy Apply
Easy Apply
Own and operate the production threat intelligence platform, maintaining system health, monitoring jobs, and ensuring data quality. Build intelligence-feed integrations, enrichment, tagging, and lifecycle workflows. Deliver intelligence to detections, blocklists, warehouses, and agent workflows. Partner with Security and Product stakeholders to translate requirements into technical capabilities, troubleshoot production issues, and implement durable fixes. Develop production-quality software using Python, Go, or Storm with CI/CD ownership, while responsibly applying generative AI.
Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
As a Threat Intelligence Platform Engineer on the Threat Intelligence team within Security Operations, you'll own Vertex Synapse in production - the platform that turns adversary intelligence into detections, blocks, and decisions across Coinbase. The TI team protects billions of dollars in digital assets by collecting, modeling, and operationalizing intelligence on the most sophisticated cyber threats targeting the crypto ecosystem. You'll keep the platform healthy, ingest and model new intelligence sources, and ship the automations that weave threat intelligence into the fabric of security operations at Coinbase.
What you'll do:
- Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene
- Build and maintain intelligence feed integrations, enrichments, and tagging so new sources land modeled and usable by stakeholders
- Ship intelligence into downstream controls and data pipelines, including detections, blocklists, data warehouses, and agent workflows
- Partner across Security and Product to translate intelligence requirements into production capabilities
- Rapidly prototype and implement features, fixes, and tooling as required by the team's Intelligence Analysts and stakeholders
Required Skills and Experience:
- 2+ years building and operating threat intelligence platforms or security data pipelines in production environments
- Software development experience in Python, Go, and/or Storm, including deploying production-quality code with CI/CD ownership after ship
- Experience ingesting, modeling, tagging, and lifecycle-managing indicators and related intelligence data at scale
- Track record of troubleshooting and restoring production systems and data quality issues, then driving root-cause fixes to prevent recurrence
- Experience translating cross-functional stakeholder needs into technical solutions within a security operations context
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Position ID: P78174
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
Annual base salary range (excluding equity and bonus):
$144,500—$170,000 USD
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
Coinbase Charlotte, North Carolina, USA Office
Coinbase Charlotte Office
Charlotte, North Carolina, United States
Similar Jobs at Coinbase
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Build and operate foundational developer infrastructure across CI, build systems, deployment orchestration, and test platforms. Improve build speed, deployment safety, test reliability, observability, and engineering productivity at scale. Own services from architecture through production, including SLOs and on-call operations. Lead cross-functional technical projects, partner with engineering teams, mentor engineers, and shape platform strategy.
Top Skills:
AWSCi/CdContainersDatadogDistributed SystemsGenerative AiGithub ActionsGoKubernetesTerraform
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Own the multi-year technical strategy and architecture for Coinbase’s enterprise IAM platform spanning human, AI agent, service, and workload identities. Drive adoption across 700+ systems, establish authentication and authorization standards, lead migrations and build-versus-buy decisions, automate audit and regulatory controls, reduce standing privilege, and mentor senior engineering talent. Partner across Security, Compliance, IT, Infrastructure, and product teams while influencing technical direction without direct authority.
Top Skills:
AWSDistributed SystemsGenerative AiGoIamOauth 2.0OidcSAMLScimWorkload Identity Federation
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Design, build, and operate foundational developer infrastructure across CI, build systems, deployment orchestration, and test platforms. Improve build speed, deployment safety, and test reliability while owning services end to end, including SLOs, observability, and on-call responsibilities. Partner with engineering teams to address platform pain points and lead cross-cutting technical projects through production.
Top Skills:
Build SystemsCi/CdDeployment OrchestrationObservabilitySlosTest Infrastructure
What you need to know about the Charlotte Tech Scene
Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
