Lead a team of investigators to conduct deep-dive ATO and scam investigations, extracting actionable insights that inform upstream mitigations and product improvements
Build and maintain systems for tracking investigation findings, patterns, and outcomes—ensuring insights are packaged and delivered to partner PED teams in a consumable and actionable format
Coach and develop investigators at varying experience levels, including transitioning operational SMEs into investigation roles and providing stretch opportunities for high-performing ICs
Accountable for strategic direction for the ATO labeling program, leveraging a mature program team responsible for execution. You will be partnering with ML/DS teams to anticipate model training needs and proactively expand labeling scope to be best-in-class
Drive the evolution of T&S manual review queues to meet business needs, implementing AI-assisted workflows
Coach program managers and SMEs to operate independently while maintaining quality and throughput standards
Partner with Risk PED, ML/DS, Litigation, and CX to translate investigation learnings into product and process changes
Govern standards including taxonomy, SLAs, and responsible AI practices across investigations, labeling, and manual review
Drive a prioritized mitigation roadmap with clear outcome metrics, automation targets, and executive readouts
Own OKRs for investigations, labeling, and manual review functions; contribute to executive business reviews
Manage escalation readouts (delegating where appropriate) and provide incident support as needed
Build and maintain dashboards and reporting to track operational health, quality, and impact.

Requirements

7+ years of experience in investigations, threat intelligence, or trust & safety, with 4+ years managing teams; we value demonstrated expertise over formal credentials—hands-on experience may substitute for a degree—we value what you've learned in the field
Deep expertise in ATO and social engineering scams (pig-butchering, romance scams, etc.)—you understand attacker TTPs and know what best-in-class investigations look like
Demonstrated expertise in structured investigative methodologies, evidence handling, and case management at scale—often developed in agency, military, or law enforcement environments (FBI, NSA, or similar), but we welcome candidates who've built these skills through other paths
Experience operating at speed and with autonomy in a tech environment—you've bridged rigorous investigative discipline with fast-moving product organizations and have built systems and processes that scale
Strong cross-functional partnership skills; able to translate technical investigation findings into actionable recommendations for product and engineering teams
SQL proficiency and experience working with AI/LLM tools required—you lead with an AI-first mindset and can envision how to integrate automation into investigations and labeling workflows
Nice to Haves: Crypto or blockchain industry experience
Threat intelligence background
Risk operations experience
Familiarity with Jira, SQL interfaces, or similar investigation/data tooling.

Benefits

Full time offers from Coinbase also include bonus eligibility + equity eligibility + benefits (including medical, dental, vision and 401(k)).

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

ATO investigationsscam investigationsstructured investigative methodologiesevidence handlingcase managementSQL proficiencyAI/LLM toolsautomation integrationdata analysisrisk operations

Soft Skills

team leadershipcoachingcross-functional partnershipstrategic directioncommunicationproblem-solvingautonomyoperational managementquality assuranceincident support