Senior Blockchain Security Engineer, Offensive Security

Base is planning to bring a million developers and a billion users onchain. We need your help to make that happen.

We believe that the onchain platform is the most important builder platform since the internet (“online”).

We believe that the onchain platform should be open source, free to use, and globally available. And we believe that in order to make it really work, we need all hands on deck, working together to scale in a secure, decentralized, easy-to-use way.

At Base, we live by our Stay Based values: we do the right thing, work hard, stay optimistic, prioritize the team, and push creative boundaries—all while building the future of onchain. We value a Zone 3+ work ethic, where our team rises to the challenge, embraces hard weeks, and makes small to significant personal tradeoffs when necessary to drive impact and innovation.

The Protocol Security team ensures the security of all onchain development at Coinbase. We partner closely with product teams to make sure that our users can safely and confidently engage with the onchain world.

What you’ll be doing (ie. job duties):

• Perform threat modeling and security assessments of blockchain products and services.
• Propose, plan, and execute Red Team operations based on realistic threats.
• Write detailed reports covering the goals and outcomes of Red Team operations, including significant observations and recommendations.
• Collaborate with partner teams to improve detection and response capabilities.
• Provide expert technical guidance to the team in building new security frameworks and analysis tools.
• Stay informed on current security trends, advisories, publications, and academic research.

What we look for in you (ie. job requirements):

• Bachelor’s or Master’s degree in Computer Science, Cyber security, Software Engineering, or a related field.
• 3+ years of blockchain security experience is required.
• 3+ years of Red Team experience, with a track record of breaking complex systems using novel techniques.
• A track record of identifying critical vulnerabilities across the blockchain protocol stack, in both onchain and offchain components.
• Extensive knowledge of the blockchain ecosystem, including the inner workings of L1 and L2 networks, DeFi protocols, native staking, etc.
• Expertise in designing robust security countermeasures to prevent known and anticipated vulnerabilities.
• Energy and self-drive for continuous learning as crypto is a constantly and rapidly changing space.
• Excellence in clear, direct, and kind communication with technical and non-technical stakeholders.
• Experience in building relationships with product, engineering, and other security teams.

Nice to haves:

• Participation in computer security competitions (CTFs), Bug Bounty programs, open source security research, CVE analysis.
• Expertise in one or more of: Application Security, Network Security, Cloud Security.
• 1+ years of Software Engineering experience.

ID: G2702

Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.

Commitment to Equal Opportunity

Coinbase is committed to diversity in its workforce and is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view Pay Transparency, Employee Rights and Know Your Rights notices by clicking on their corresponding links. Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law.

Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to accommodations[at]coinbase.com and let us know the nature of your request and your contact information. For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here).

Global Data Privacy Notice for Job Candidates and Applicants

Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required. For US applicants only, by submitting your application you are agreeing to arbitration of disputes as outlined here.