Specialist, CSIRT

📋 Description

• Own frontline incident response, build detection and automation capabilities, and partner across
• Own second-line triage and response for security alerts, leading incident management through
• Build and maintain runbooks for repeatable response patterns, then define and implement automation
• Partner with teams across Security Operations to develop monitoring strategies informed by attacker
• Drive Security monitoring and incident response for emerging Web3 product launches.
• Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7

🎯 Requirements

• 3+ years of hands-on security operations experience including incident response, alert triage, and
• Demonstrated ability to identify detection gaps and build coverage across diverse log sources
• Proficiency scripting automation workflows that reduce manual investigation and response time
• Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS)
• Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs

🎁 Benefits

• Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants
• Accommodations: If you are an individual with a disability who needs a reasonable accommodation