Specialist, CSIRT

What you'll do:

• Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements
• Build and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil
• Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings
• Drive Security monitoring and incident response for emerging Web3 product launches
• Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones

Required Skills and Experience:

• 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments
• Demonstrated ability to identify detection gaps and build coverage across diverse log sources (cloud platforms, SaaS applications, container orchestration, M&A integrations)
• Proficiency scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent)
• Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts
• Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Position ID: P77687

#LI-Remote

Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).

Annual base salary range (excluding equity and bonus):Rp2.755.300—Rp2.755.300 IDR

• Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
• Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
• US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
• Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
• Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.