Specialist, CSIRT

About the role

As a Security Operations Specialist on the Security Operations team, you'll defend Coinbase and its customers against some of the most sophisticated attackers in the world. This team - spanning CDRE, Insider Threat, Blockops and Threat Intelligence - protects billions of dollars in digital assets while scaling security coverage for the next billion crypto users.

What you'll do

• Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements
• Build and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil
• Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings
• Drive Security monitoring and incident response for emerging Web3 product launches
• Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones

What you need

• 3–6 yrs of experience
• Incident response
• SIEM
• Linux
• Python
• Networking
• LLMs
• Any graduate

Good to have

• M&A
• Bash