Specialist, CSIRT

ABOUT THE ROLE As a Specialist, CSIRT at Coinbase, you will be part of a team that defends the company and its customers against sophisticated attackers. This role requires a strong background in security operations, with experience in incident response, alert triage, and network/host forensics. You will be responsible for owning frontline incident response, building detection and automation capabilities, and partnering across the organization to keep Coinbase safe as it launches new Web3 products globally. WHAT YOU'LL DO As a Specialist, CSIRT, your key responsibilities will include: - Owning second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements - Building and maintaining runbooks for repeatable response patterns, then defining and implementing automation to eliminate manual toil - Partnering with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings - Driving Security monitoring and incident response for emerging Web3 product launches - Strengthening team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones WHAT YOU'LL NEED To be successful in this role, you will need: - 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments - Demonstrated ability to identify detection gaps and build coverage across diverse log sources (cloud platforms, SaaS applications, container orchestration, M&A integrations) - Proficiency in scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent) - Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts - Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios - Ability to utilize generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality WHY REMOTE As a remote-first company, Coinbase offers the flexibility to work from anywhere. You will be part of a global team that collaborates and communicates effectively, with opportunities to participate in quarterly in-person working sessions called "surges." BENEFITS - Target annual base salary range: Rp2,755,300 - Rp2,755,300 IDR - Equity and bonus eligibility - Benefits, including medical, dental, and vision - Flexible schedule - Opportunities for professional growth and development - Access to cutting-edge technology and tools - Collaborative and dynamic work environment