Product Security Engineer

Posted Yesterday
Easy Apply
Be an Early Applicant
Hiring Remotely in Canada
Remote
154K-154K Annually
Mid level
Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Coinbase is on a mission to increase economic freedom for more than 1 billion people.
The Role
Build AI-driven security scanners and automation for vulnerability discovery, triage, validation, and remediation. Red team internal AI systems through jailbreak, prompt injection, and tool abuse testing. Partner with engineering teams to remediate vulnerabilities, verify fixes, and improve bug bounty and incident response workflows. Mentor junior security engineers on AI-augmented offensive security practices.
Summary Generated by Built In

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.

As an Offensive Security Engineer on the Application Security team within Security, you'll pioneer how Coinbase uses frontier AI models to scale vulnerability discovery, red team AI systems, and automate security workflows. This role bridges traditional penetration testing with next-generation AI-augmented offensive security, directly accelerating our ability to protect products and customers. You'll own the development of AI-driven security tooling and collaborate across Vulnerability Management, Offensive Security, and Incident Response to fundamentally shift how we operate.

What you'll do:

  • Build, deploy, and maintain custom security scanners that leverage frontier models to detect vulnerabilities at scale across Coinbase's product surface.
  • Lead red teaming efforts against internal AI systems, including jailbreak testing, prompt injection analysis, and tool abuse simulation.
  • Develop AI-driven automation for vulnerability triage, validation, and remediation workflows to accelerate the bug bounty and vulnerability response pipelines.
  • Partner with engineering teams to prioritize, remediate, and verify fixes for critical vulnerabilities discovered through AI-augmented and manual testing.
  • Mentor junior security engineers on integrating AI into offensive security workflows to scale team capabilities.

Required Skills and Experience:

  • 3+ years of experience in application security, penetration testing, or offensive security with demonstrated ability to build custom security tooling.
  • Hands-on experience using LLMs or frontier models to automate security tasks, scale vulnerability research, or build security scanners.
  • Demonstrated experience red teaming AI-based systems (prompt injection, jailbreak testing, tool abuse).
  • Deep understanding of common vulnerability classes (OWASP Top 10, SANS Top 25) and proven track record identifying and exploiting them in production environments.
  • Proficiency in at least one programming language (Python, Go, or similar) with experience writing production-grade security tooling.
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).

Annual base salary range (excluding equity and bonus):
$154,000$154,000 CAD
  • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
  • Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
  • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
  • Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
  • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.

Skills Required

  • 3+ years of experience in application security, penetration testing, or offensive security
  • Experience building custom security tooling
  • Hands-on experience using LLMs or frontier models to automate security tasks, scale vulnerability research, or build security scanners
  • Experience red teaming AI-based systems, including prompt injection, jailbreak testing, and tool abuse
  • Deep understanding of OWASP Top 10 and SANS Top 25 vulnerability classes
  • Proven ability to identify and exploit vulnerabilities in production environments
  • Proficiency in Python, Go, or a similar programming language
  • Experience writing production-grade security tooling
  • Ability to use generative AI responsibly with human oversight

What the Team is Saying

Jona Frank
Wes Janisen
Sofia Sieminski
Philip Temitayo
Varsha Mahadevan

Coinbase Compensation & Benefits Highlights

How does Coinbase ensure its pay and bonus plans are competitive?

Coinbase uses a market-driven, pay-for-performance approach to keep pay and bonus plans competitive. Coinbase regularly benchmarks roles against leading technology and fintech companies using external market data and reviews its compensation programs on a recurring basis to ensure salary, bonus, and equity remain aligned with the broader market and business goals. Annual bonus and equity programs are tied to both company results and individual impact, so when Coinbase and its people perform, total rewards reflect that performance.

Coinbase Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
4,700 Employees
Year Founded: 2012

What We Do

Crypto creates economic freedom by ensuring that people can participate fairly in the economy, and Coinbase (NASDAQ: COIN) is on a mission to increase economic freedom for more than 1 billion people. We’re updating the century-old financial system by providing a trusted platform that makes it easy for people and institutions to engage with crypto assets, including trading, staking, safekeeping, spending, and fast, free global transfers. We also provide critical infrastructure for onchain activity and support builders who share our vision that onchain is the new online. And together with the crypto community, we advocate for responsible rules to make the benefits of crypto available around the world.

Why Work With Us

We have the opportunity to accelerate the pace of innovation in the world by building an open financial system. Our vision is to create more economic freedom in the world, to help people control their own wealth, start companies, have financial privacy, and participate in the global economy. And to get us there, we focus, build and move as a team.

Gallery

Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery
Gallery

Coinbase Teams

Team
What It’s Like to Work on Coinbase’s Consumer Engineering Team Building the “Everything Exchange”
About our Teams

Coinbase Offices

Remote Workspace

Employees work remotely.

Coinbase is remote-first, which enables us to innovate, build and move quickly. Our teams are able to work effectively from around the globe with time for in-person offsites and team meetups to enhance collaboration and connection.

Typical time on-site: None
Company Office Image
HQSan Francisco
Company Office Image
Ireland
Company Office Image
United Kingdom
Company Office Image
India
Company Office Image
Canada
Company Office Image
Charlotte
Company Office Image
New York
Company Office Image
Singapore
Learn more

Similar Jobs

Coinbase Logo Coinbase

Senior Software Engineer

Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Easy Apply
Remote
Canada
4700 Employees
191K-191K Annually

Coinbase Logo Coinbase

Senior Software Engineer

Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Easy Apply
Remote
Canada
4700 Employees
191K-191K Annually

Coinbase Logo Coinbase

Staff Software Engineer

Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Easy Apply
Remote
Canada
4700 Employees
254K-299K Annually

Coinbase Logo Coinbase

Senior Software Engineer

Artificial Intelligence • Blockchain • Fintech • Financial Services • Cryptocurrency • NFT • Web3
Easy Apply
Remote
Canada
4700 Employees
191K-191K Annually

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account