Specialist, CSIRT
About the role
Security Operations Specialist responsible for frontline incident response, detection automation, and cross-team collaboration to defend Coinbase and its customers against sophisticated attackers, with a focus on incident management, monitoring strategies, and support for Web3 product launches.
Responsibilities
- Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements
- Build and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil
- Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings
- Drive Security monitoring and incident response for emerging Web3 product launches
- Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones
Qualifications
- 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments
- Demonstrated ability to identify detection gaps and build coverage across diverse log sources (cloud platforms, SaaS applications, container orchestration, M&A integrations)
- Proficiency scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent)
- Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts
- Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Skills
Benefits
- Medical insurance including Dental & Vision for employees and dependants
- Group Personal Accidental Insurance
- Group Term Life Insurance
- Employee Stock Purchase Plan (ESPP)
- Wellness Stipend
- Mobile/Internet Reimbursement
- Learning and Development Allowance
- Employee Assistance Program
- Travel Medical Policy – Global Traveler
- Fertility Benefits
- Generous Time Off/Leave Policy

About Coinbase
Buy, sell, and manage cryptocurrencies.
Founded in June of 2012, Coinbase is a digital currency wallet and platform where merchants and consumers can transact with new digital currencies like bitcoin, ethereum, and litecoin. Our vision is to bring more innovation, efficiency, and equality of opportunity to the world by building an open financial system. Our first step on that journey is making digital currency accessible and approachable for everyone. Two principles guide our efforts. First, be the most trusted company in our domain. Second, create user-focused products that are easier and more intuitive to use.
More open roles at Coinbase
- 4d ago
- Senior Product Marketing Manager, Infrastructure4d agoRemote · Infrastructure Marketing
- Senior Recruiter4d agoRemote · People Success
- Principal Recruiter4d agoHybrid (Remote - USA) · People Success, Core Recruiting
- Senior Data Scientist, Product4d agoRemote · Data Science
