Penetration Testing Intern, Coinbase
$50 USD
The world’s leading exchange for digital currencies
Be an early applicant
The world’s leading exchange for digital currencies
1001+ employees
Be an early applicant
$50 USD
1001+ employees
Company mission
Their mission is to create an open financial system for the world and to be the leading global brand for helping people convert digital currency into and out of their local currency.
Role
Who you are
- Programming experience or ability in one of our core languages. At current inventory, we use Ruby (Sinatra & Rails) or Golang, andJavaScript (Server & client flavors). Python experience will be beneficial for automation based project work. You don’t need to be a whiz, but we expect you to be able to perform secure code review of new features and/or services
- Exposures to risk and threat modeling methodology. You don’t need to be able to rattle off everything in the CWE as you iterate through STRIDE, but structure and fluidity in your analyses will really help you communicate efficiently across teams
- Web Application Security experience. Be it source code audit, penetration testing, bug bounty triage, or code reviews, you’ll be expected to examine code with security critical eyes
- Experience in the automation of manual processes. (ex: Python Scripts, Selenium, Playwright, etc)
- Ability to understand and solve complex problems, which require the ability to work independently and unblock yourself as required
- Strong written and verbal communication skills, specifically on security topics. The work our team does is consumed by various cross functional teams and leaders; so being able to effectively communicate will be invaluable in avoiding confusion and providing a poor customer experience
Desirable
- Currently pursuing a degree or certificate in a related discipline
- Experience working in a high security and/or highly regulated industry. (ex: PCI, SOC, NIST, etc)
- Experience in applied cryptography and/or cryptographic research
- Experience in exploit development and/or security research
- Some personal or professional experience with exploitation/auditing in the Web3/crypto space
- If you have open source security tooling to your name, we’d love to take a look and understand what problem you are solving and how your solution works. We heavily encourage Open Source contributions!
What the job involves
- This is a 12-week internship during summer 2025
- The Security Advisory Services (SAS) team at Coinbase plays a crucial role in ensuring the security and integrity of the company's infrastructure and applications
- They are responsible for conducting thorough security reviews of applications, infrastructure, and software as a service (SaaS) solutions
- The team operates by integrating secure design principles into the early stages of development and reviewing PRs (Pull Requests) for potential vulnerabilities
- For quick consultations and reviews, they also leverage various channels like the Slack bot and integration reviews, ensuring robust security measures are in place across all Coinbase services
- You will support pen testing including, but not limited to the following:
- Web applications and apis
- Web3 (ex: DApp, NFTs etc)
- Cloud infrastructures (AWS)
- As a member of the security assessment team, you will assist in the development of frameworks and automated tools to be leveraged during assessments
- Support / Contribute to scoping assessments, setup/configuration of test environments and vulnerability remediation testing
- You will be responsible for supporting our public Bug Bounty program. This will include, but is not limited to: tiered support, documentation, stakeholder management, risk ranking, on-call rotation and researcher feedback
Our take
Coinbase allows its users to create their own crypto wallets and start buying or selling cryptocurrencies by connecting with their bank accounts. It also provides a series of merchant payment processing systems and tools that support transactions with many popular websites.
Coinbase has recently made a big push to broaden its services away from consumers and they want to cater services from institutional investors.
Coinbase currently offers one of the largest selection of cryptocurrency assets - over 10,000 but does not allow trading on all of them. The company wisely keeps such offerings to the most stable assets however, the list is always expanding. Coinbase see a much wider adoption of cryptocurrency and tokens in the future, and plan to expand potentially to millions in the future. It speaks volumes to Coinbase's goals of wider global adoption that former UK Finance Minister George Osborne is now an Advisor at the company.
Coinbase's lofty ambitions paid off in it being the first crypto listing on the NASDAQ. The company has weathered several bull and bear runs in the cryptocurrency industry through diversification of its offerings, including wallet-as-a-service technology for crypto platforms, and has acquired healthy coffers of cryptocurrency assets. The aim is to eventually operate independently of the volatility surrounding cryptocurrencies.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Funding (last 2 of 8 rounds)
Oct 2018
$300m
GROWTH EQUITY VC
Oct 2018
$108.1m
SERIES D
Total funding: $633.4m
Company benefits
- 12 weeks maternity/paternity leave
- Vision and dental care
- Commuter benefits
- Learning and development budget
- Unlimited paid time off policy
- Work from home opportunities
- Health insurance
Company values
- Clear Communication - Share information efficiently, improving collaboration and productivity. Practice active listening while. Being candid and kind
- Positive Energy - Be optimistic about the future and determined to get there. Co-create solutions and work together to get there
- Continuous Learning - We view every situation as an opportunity to learn, We value giving and receiving regular feedback
- Efficient Execution - We complete high quality work quickly by working smarter, not harder. We prefer automation over manual work
- Act like an owner: We take 100% responsibility for achieving the mission. We seek to improve all aspects of our company even in ways that are not explicitly part of our job. We run through brick walls.
- Customer focus: We are deeply focused on solving our customers’ problems with technology, by enabling them to acquire, store and use crypto. We strive to be the easiest to use, most trusted and most secure platform. In every decision we make, we ask, “How does this create more value for our customers?”
- Repeatable innovation: We are builders, leveraging technology to improve the world, constantly shipping ideas vs just discussing them. We know that companies must continually reinvent themselves to avoid stagnation. We have a high tolerance for failure, investing 10% of our resources in venture bets that are uncomfortably ambitious
Company HQ
Civic Center, New York, NY
Articles
Leadership
Brian Armstrong
(CEO)Previously founded UniversityTutor.com, also worked as a Software Engineer at AirBnb
Alessia Haas
(CFO)Previously held various head positions, including VP at GE Healthcare, Director at Merrill Lynch and CFO at CIT Bank and Oz Management
People progressing
Joined as a Compliance Analyst, promoted to Compliance Partnerships Senior Associate in 15 months. 2 promotions later, she is now a Financial Crimes & Compliance Manager.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 181 more jobs at Coinbase