Threat Intelligence Platform Engineer

Coinbase

Threat Intelligence Platform Engineer operating Coinbase’s Vertex Synapse platform. Building threat intelligence integrations, detections, blocklists, and security automation for the crypto ecosystem.

Posted 9/3/2026full-timeRemote • 🇺🇸 United StatesJuniorMid-Level💰 $144,500 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in building and operating threat intelligence platforms, with a strong focus on data hygiene, integration, and operationalizing intelligence for security applications. Proficient in software development and deployment practices, particularly in Python and Go, to enhance security data pipelines.

Highest-signal resume keywords

Threat Intelligence Platform ManagementPython Software DevelopmentCI/CD Deployment OwnershipData Modeling and Lifecycle ManagementCross-Functional Stakeholder Collaboration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat Intelligence PlatformsPythonGoStormData HygieneData PipelinesCI/CDTroubleshootingRoot-Cause AnalysisGenerative AI Oversight

Soft Skills

CollaborationProblem-SolvingCommunication

Industry Keywords

Cyber ThreatsCrypto EcosystemSecurity OperationsData QualityIntelligence Analysts

Tech Stack

Tools & technologies

GoPython

About the role

Key responsibilities & impact

Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene
Build and maintain intelligence feed integrations, enrichments, and tagging
Ship intelligence into detections, blocklists, data warehouses, agent workflows, and other downstream controls and data pipelines
Partner across Security and Product to translate intelligence requirements into production capabilities
Prototype and implement features, fixes, and tooling for Intelligence Analysts and stakeholders
Collect, model, and operationalize intelligence on cyber threats targeting the crypto ecosystem

Requirements

What you’ll need

2+ years building and operating threat intelligence platforms or security data pipelines in production environments
Software development experience in Python, Go, and/or Storm
Experience deploying production-quality code with CI/CD ownership after ship
Experience ingesting, modeling, tagging, and lifecycle-managing indicators and related intelligence data at scale
Track record of troubleshooting and restoring production systems and data quality issues, then driving root-cause fixes to prevent recurrence
Experience translating cross-functional stakeholder needs into technical solutions within a security operations context
Responsible use of generative AI with human oversight
Must be based in the USA

Benefits

Comp & perks

Equity eligibility
Bonus eligibility
Medical insurance
Dental insurance
Vision insurance
401(k)
Quarterly in-person working sessions (“surges”)
Reasonable accommodations for individuals with disabilities
Free compatible screen reader and tutorial for applicants needing screen-reading technology