Senior Security Engineer, Offensive Security (Red Team)

Remote - USA

Full Time Senior-level / Expert

Coinbase has built the world's leading compliant cryptocurrency platform serving over 73 million accounts in more than 100 countries. With multiple successful products, and our vocal advocacy for blockchain technology, we have played a major part in mainstream awareness and adoption of cryptocurrency. We are proud to offer an entire suite of products that are helping build the cryptoeconomy and increase economic freedom around the world.

There are a few things we look for across all hires we make at Coinbase, regardless of role or team. First, we look for signals that a candidate will thrive in a culture like ours, where we default to trust, embrace feedback, disrupt ourselves, and expect sustained high performance because we play as a championship team. Second, we expect all employees to commit to our mission-focused approach to our work. Finally, we seek people with the desire and capacity to build and share expertise in the frontier technologies of crypto and blockchain, in whatever way is most relevant to their role.

 

What you’ll be doing (ie. job duties):

  • Perform adversarial simulation (Red Team) assessments of our Crypto Infrastructure including our wallet services, crypto key management systems, blockchain nodes, smart contracts and our DeFi services. 
  • Develop tools & frameworks to automate adversarial simulations, help us build the Metasploit Platform for Crypto.  
  • Perform exploit development for our Crypto Infrastructure.
  • Collaborate with our various teams in Crypto including our Cryptography Team, our MPC Engineers, Blockchain Engineers to help provide assurance frameworks to protect our infrastructure.

What we look for in you (ie. job requirements):

  • Proficient in a modern high level language Python, Ruby, or Go.
  • Experience performing pen-tests with exploits and custom payloads in a production environment
  • Experience building, deploying, and managing Red Team infrastructure services in production.
  • Strong understanding of cryptography, protocol design and analysis. 
  • Experience in reverse engineering and/or exploit development and engineering mitigation solutions.  
  • You’re experienced in developing solutions to ambiguous and challenging security problems in a novel industry.

Nice to haves:

  • Experience in blockchain development and architecture. 
  • Experience with Solidity smart contracts and Ethereum development tools. 
  • Passionate about working with state of the art cryptography, e.g. Threshold Signing, Zero-Knowledge Proofs, Verifiable Encryption, and Multi-Party Computation. 
  • Experience developing custom threat model/security frameworks tailored to an industry,  that go beyond the more common frameworks, e.g. MITRE, STRIDE, etc.  

 

Commitment to Equal Opportunity

Coinbase is committed to diversity in its workforce and is proud to be an Equal Opportunity Employer.  All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law.  For US applicants, you may view Pay Transparency, Employee Rights and Equal Employment Opportunity is the Law notices by clicking on their corresponding links.  Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law.    

Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to accommodations@ coinbase.com and let us know the nature of your request and your contact information.  For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here). Please contact accommodations@ coinbase.com for additional information or to request accommodations.

Global Data Privacy Notice for Job Candidates and Applicants

Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required.

 

Job region(s): Remote/Anywhere North America
Job stats:  9  2  0
  • Share this job via
  • or

Explore more Information Security career opportunities