Staff Security Engineer, InfraSec

📋 Description

• • As a Staff Security Engineer specializing in Infrastructure Security (InfraSec) at Coinbase, you will be at the vanguard of safeguarding the foundational elements of our rapidly expanding platform and its associated services. This pivotal role demands a proactive and strategic approach to security, working in close collaboration with our diverse engineering teams to architect, implement, and automate state-of-the-art security solutions. You will navigate and secure complex cloud environments, including multi-cloud setups (AWS, GCP) and sophisticated containerized ecosystems powered by Kubernetes and Docker.
• • Your responsibilities will extend to developing and enforcing secure-by-default patterns for infrastructure-as-code (IaC) using tools like Terraform, ensuring that our infrastructure is built with security as a primary consideration from the outset. A significant aspect of this role involves hands-on coding, particularly in Go, to streamline security processes, establish robust guardrails, and seamlessly integrate various security solutions into our existing and future systems.
• • You will be instrumental in conducting comprehensive security reviews of our cloud architecture, data platforms (such as Snowflake and Databricks), and network routing configurations. This proactive assessment will identify potential vulnerabilities, misconfigurations, and areas for enhancement, with your recommendations directly influencing our security posture.
• • A key function of this position is to act as a trusted advisor and partner to engineering teams, embedding security best practices directly into the design, development, and deployment lifecycle of all platform services. This collaborative approach ensures that security is not an afterthought but an integral component of our technological innovation.
• • You will engage with a wide array of cross-functional teams, including product, engineering, and business units, to ensure that our security initiatives are strategically aligned with overarching company objectives. This involves a delicate balance of maintaining robust security, managing inherent risks, and enabling business growth and innovation.
• • In scenarios involving mergers and acquisitions (M&A), you will play a critical role in evaluating the security posture of target companies, developing integration plans, and ensuring that acquired entities are seamlessly and securely incorporated into Coinbase’s established security frameworks and paved road solutions.
• • This role requires significant influence, where you will be expected to engage with and guide senior leaders and key stakeholders. Your expertise will be crucial in shaping technical decisions, defining risk management strategies, and navigating complex tradeoffs to achieve outcomes that are both secure and scalable, supporting Coinbase's ambitious growth trajectory.
• • You will be a driving force behind the continuous evolution and enhancement of our security policies, threat detection capabilities, and incident response automations. This includes staying abreast of emerging threats and vulnerabilities and proactively implementing measures to mitigate them.
• • The ideal candidate will possess a deep understanding of modern cloud and containerized platform technologies, with a particular emphasis on securing data platforms and cloud edge security. Experience in hybrid cloud and on-prem environments, along with proficiency in policy enforcement tools like Open Policy Agent (OPA), will be highly valued.
• • This position offers a unique opportunity to contribute to the mission of increasing economic freedom globally by building and securing the future of the onchain economy. You will be part of an intense, high-caliber work culture that demands excellence and rewards innovation, working alongside colleagues who are leaders in their respective disciplines.