Product Security Engineer

ABOUT THE ROLE Coinbase is building the future of finance by creating a global, open financial system that is accessible to everyone. As a Product Security Engineer on the Application Security team, you will be at the forefront of protecting the most trusted digital asset platform in the world. Your work will directly influence how we secure billions of dollars in user funds, safeguard sensitive data, and maintain the trust of millions of customers worldwide. You will collaborate with cross‑functional teams—including Vulnerability Management, Incident Response, and product engineering—to design, develop, and deploy AI‑driven security solutions that scale our defensive and offensive capabilities. Your insights will shape the next generation of security tooling, ensuring that Coinbase remains a leader in proactive threat detection and rapid remediation. WHAT YOU'LL DO - Build, deploy, and maintain custom security scanners that leverage frontier AI models to detect vulnerabilities across Coinbase’s product surface at scale. - Lead red‑team engagements against internal AI systems, performing jailbreak testing, prompt‑injection analysis, and tool‑abuse simulations to uncover hidden weaknesses. - Design and implement AI‑driven automation for vulnerability triage, validation, and remediation, accelerating our bug‑bounty and response pipelines. - Partner with engineering teams to prioritize, remediate, and verify fixes for critical vulnerabilities identified through AI‑augmented and manual testing. - Mentor junior security engineers on integrating AI into offensive security workflows, expanding team capacity and expertise. WHAT YOU'LL NEED - Three or more years of experience in application security, penetration testing, or offensive security, with a proven track record of building production‑grade security tooling. - Hands‑on experience using large language models or frontier AI models to automate security tasks, scale vulnerability research, or develop security scanners. - Demonstrated expertise in red‑teaming AI‑based systems, including prompt injection, jailbreak testing, and tool abuse scenarios. - Deep knowledge of common vulnerability classes such as OWASP Top 10 and SANS Top 25, and a history of identifying and exploiting them in production environments. - Proficiency in at least one programming language (Python, Go, or similar) and experience writing secure, maintainable code for high‑volume, low‑latency applications. WHY REMOTE Coinbase operates as a remote‑first organization, empowering engineers to work from anywhere while maintaining a strong, collaborative culture. Our distributed teams thrive on asynchronous communication, flexible schedules, and a focus on results rather than location. Quarterly in‑person “surges” bring the team together for intensive collaboration, knowledge sharing, and culture building, ensuring that remote work does not dilute our sense of community. BENEFITS - Comprehensive health, dental, and vision coverage for employees and dependents. - Generous paid time off, including personal, sick, and parental leave. - Remote work stipend to support home‑office setup and connectivity. - Annual learning budget and access to industry conferences, training, and certifications. - Competitive equity and bonus programs aligned with company performance. - Inclusive, diverse workplace with robust support for employees with disabilities and other accommodations.