Threat Intelligence Platform Engineer

About the role

In this role, you will be responsible for the health and operations of the Vertex Synapse instance, ensuring data hygiene and backend functionality. You will build integrations for intelligence feeds, enabling stakeholders to effectively utilize new data sources.

You will collaborate with teams across Security and Product to translate intelligence needs into actionable capabilities. The position emphasizes rapid prototyping and implementation of features and tools, tailored to the requirements of Intelligence Analysts and stakeholders.

The salary range for this position is between $144,500 and $170,000 USD, depending on location.

Skills that matter here

• Python: This role requires software development experience in Python for building and operating security data pipelines.
• Go: Experience in Go is necessary for deploying production-quality code within threat intelligence platforms.
• Storm: Knowledge of Storm is important for managing real-time data processing in security operations.

Who this role suits

• Candidates should have a strong problem-solving mindset and be comfortable working in a fast-paced environment.
• A collaborative spirit is essential, as this role involves working closely with various teams.
• Individuals who thrive here are proactive and willing to push their limits to achieve impactful results.

From the employer

What you'll do:

• Own the production Vertex Synapse instance, including platform health, backend operations, cron monitoring, and data hygiene
• Build and maintain intelligence feed integrations, enrichments, and tagging so new sources land modeled and usable by stakeholders
• Ship intelligence into downstream controls and data pipelines, including detections, blocklists, data warehouses, and agent workflows
• Partner across Security and Product to translate intelligence requirements into production capabilities
• Rapidly prototype and implement features, fixes, and tooling as required by the team's Intelligence Analysts and stakeholders

Required Skills and Experience:

• 2+ years building and operating threat intelligence platforms or security data pipelines in production environments
• Software development experience in Python, Go, and/or Storm, including deploying production-quality code with CI/CD ownership after ship
• Experience ingesting, modeling, tagging, and lifecycle-managing indicators and related intelligence data at scale
• Track record of troubleshooting and restoring production systems and data quality issues, then driving root-cause fixes to prevent recurrence
• Experience translating cross-functional stakeholder needs into technical solutions within a security operations context
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Pay Transparency Notice:

• Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)). Annual base salary range (excluding equity and bonus): $144,500—$170,000 USD
• Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
• Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.