Offensive Security Engineer, Coinbase
Offensive Security
The world’s leading exchange for digital currencies
Open for applications
The world’s leading exchange for digital currencies
1001+ employees
Open for applications
1001+ employees
Company mission
To increase economic freedom for more than 1 billion people.
Role
Who you are
- A Bachelor’s degree in Computer Science, Computer Engineering, or a related field
- Relevant security certifications (e.g., OSCP, GPEN)
- Experience in programming languages such as Go, JavaScript, Python or Ruby
- Knowledge of common vulnerabilities (e.g., OWASP Top 10, SANS Top 25)
- Excellent communication skills to effectively communicate with researchers and internal teams
- Ability to work independently and take ownership of deliverables
Desirable
- Experience performing red team activities of company products and services
- Experience pentesting AI products and features
- Experience in Web3 security, network security and/or cloud security
What the job involves
- The Application Security org at Coinbase is hiring for an L3 Offensive Security Engineer
- In this role, you will participate in penetration testing and red team activities
- You will also take part in bug bounty triage and security automation
- You will work alongside other security engineers and collaborate with cross-functional teams to enhance the overall security posture of the company
- Conduct internal penetration testing engagements on web and mobile applications and services
- Document and report findings from security assessments and pentests
- Collaborate with engineering teams to prioritize and remediate known vulnerabilities
- Participate in the triage and validation of bug bounty submissions
- Contribute to the development of security tools and automation
- Contribute to the development and improvement of security testing methodologies
- Provide on-call support for product security incidents
- Participate in red team activities to identify weaknesses in security controls, as well as network and application-level security boundaries
Our take
Coinbase has built a reputation as one of the most accessible entry points into the world of cryptocurrency. With features like crypto wallets, direct bank account linking, and merchant payment tools, it's helping bring crypto into the mainstream. But the company isn't just relying on its early success, it's evolving fast to stay relevant in a rapidly changing market.
Lately, its doubled down on its focus on institutional clients, now serving as the custodian for the majority of approved Bitcoin and Ethereum ETFs, and its Prime platform offers a full suite of services for hedge funds, asset managers, and financial institutions. As demand for regulated crypto products rise globally (particularly in Asia), Coinbase is ready to expand.
And it's even making moves to engage with younger audiences, having recently partnered with Riot Games to sponsor global eSports events for League of Legends and Valorant. This multi-year deal, commencing with the Valorant Masters in Toronto and the MSI 2025 tournament in Vancouver. This partnership highlights Coinbase's strategy to integrate Web3 technologies into mainstream entertainment, aiming to bridge the gap between gaming and cryptocurrency for a new generation of users.
Freddie
Company Specialist at Welcome to the Jungle
Insights
-24% employee growth in 12 months
Company
Funding (last 2 of 8 rounds)
Oct 2018
$300m
GROWTH EQUITY VC
Oct 2018
$108.1m
SERIES D
Total funding: $633.4m
Leadership
Brian Armstrong
(Co-Founder & CEO)Previously founded UniversityTutor.com, also worked as a Software Engineer at AirBnb
Alessia Haas
(CFO)Previously held various head positions, including VP at GE Healthcare, Director at Merrill Lynch and CFO at CIT Bank and Oz Management
Share this job
View 287 more jobs at Coinbase