Coinbase is hiring a

Security Engineer - Detection and Response

San Francisco, United States

Coinbase stores more digital currency than any company in the world, making us a tier 1 target on the internet. Given breaches are the number one cause of death amongst digital currency companies, security is core to our mission and has been a key competitive differentiator for us as we scale.  If you got into IR for the thrill of the hunt and crave a real adversary, but find yourself responding to generic phishing and yet another piece of adware...we should talk.


  • Build/deploy/maintain security controls, instrumentation and detection infrastructure
  • Investigate security events, or better yet, automate the investigation and remediation of security events
  • Conduct in-depth research on attacker profiles and infrastructure to better predict and prevent future attacks


  • Significant experience in incident detection, incident response and forensics
  • Proficient in a modern high level language (Python, Ruby, Node, Go, etc.)
  • Strong understanding of AWS services and architectures


  • Experience mitigating DDoS attacks
  • Experience with executing incident response in virtual and containerized environments
  • Experience conducting research on threat actors and their methodologies

What to send

  • A resume or LinkedIn profile
  • A link to your GitHub/Stack Overflow/HackerOne profile or something awesome that you've built
  • A brief answer to the following question: If you were to break into Coinbase, how would you do it?


In case you are wondering what technologies we use at Coinbase, we’re built using a combination of Ruby, Node.js, PostgreSQL, MongoDB, Redis, Swift (for iOS), and Java (for Android). Prior experience with these exact languages/technologies is not required.

Coinbase is committed to diversity in its workforce and is proud to be an equal opportunity employer.  Coinbase does not make hiring or employment decisions on the basis of race, color, religion, creed, gender, national origin, age, disability, veteran status, marital status, pregnancy, sex, gender expression or identity, sexual orientation, citizenship, or any other basis protected by applicable local, state or federal law.  Coinbase will also consider for employment qualified applicants with arrest and conviction records in a manner consistent with San Francisco’s Fair Chance Ordinance and similar local laws.