Skip to Content
Remote

Specialist, CSIRT

Job Overview

As a Security Operations Specialist on the Security Operations team, you'll defend Coinbase and its customers against some of the most sophisticated attackers in the world.

Key points

  1. Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements.

  2. Build and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil.

  3. Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings.

  4. Drive Security monitoring and incident response for emerging Web3 product launches.

  5. Proficiency scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent).

  6. Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts.

  7. Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios.

  8. Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Skills

P77687#LI-RemotePythonLinuxGenerative AI

Experience: Mid-level · 3+ years