Senior Manager, Threat Intelligence

At Coinbase, our mission is to increase economic freedom around the world, and we couldn’t do this without hiring the best people. We’re a group of hard-working overachievers who are deeply focused on building the future of finance and Web3 for our users across the globe, whether they’re trading, storing, staking or using crypto. Know those people who always lead the group project? That’s us.

There are a few things we look for across all hires we make at Coinbase, regardless of role or team. First, we look for candidates who will thrive in a culture like ours, where we default to trust, embrace feedback, and disrupt ourselves. Second, we expect all employees to commit to our mission-focused approach to our work. Finally, we seek people who are excited to learn about and live crypto, because those are the folks who enjoy the intense moments in our sprint and recharge work culture. We’re a remote-first company looking to hire the absolute best talent all over the world.

Who you are:

• You’ve got positive energy. You’re optimistic about the future and determined to get there. 
• You’re never tired of learning. You want to be a pro in bleeding edge tech like DeFi, NFTs, DAOs, and Web 3.0. 
• You appreciate direct communication. You’re both an active communicator and an eager listener - because let’s face it, you can’t have one without the other. You’re cool with candid feedback and see every setback as an opportunity to grow.
• You can pivot on the fly. Crypto is constantly evolving, so our priorities do, too. What you worked on last month may not be what you work on today, and that excites you. You’re not looking for a boring job.
• You have a “can do” attitude. Our teams create high-quality work on quick timelines. Owning a problem doesn’t scare you, but rather empowers you to take 100% responsibility for achieving our mission.
• You want to be part of a winning team. We’re stronger together, and you’re a person who embraces being pushed out of your comfort zone.

Security is a primary competency at Coinbase, and the Security Operations team keeps a watchful eye over every aspect of it. Every day, we go to battle against some of the most sophisticated attackers in the world to protect billions of dollars worth of digital assets and ensure that our customers and employees can enjoy a safe, trusted experience. As Coinbase scales globally, our team is scaling along with it, using a blend of tooling, automation, and strategic team growth to ensure that we’re well-equipped to protect the next billion users of crypto.

What you’ll be doing: 

The Senior Manager, Threat Intelligence is responsible for strategy, operational oversight, and governance of all aspects of cyber threat intelligence at Coinbase - to include ensuring intelligence support for the Security Operations and other Information Security intelligence requirements. The ideal candidate will possess a deep technical understanding of threat intelligence, cyber-fraud, blockchain (Web 3.0) and traditional (Web 2.0) threat landscapes.  

Reporting to the Senior Director, Security Operations, this leader will be instrumental in safeguarding the Coinbase environment, its products, and its customers by defining and delivering intelligence services that provide actionable intelligence and disruption of threat-actor activities.

• Lead a team of threat intelligence operators to set the tempo for how Threat Intelligence disrupts and deflects threat actors away from Coinbase and its customers
• Lead and set the long-term and day-to-day organizational strategies and operational battle rhythm for Threat Intelligence and Threat Research teams
• Engage and partner with leaders internal to Security Operations, Information Security, and across the business to identify intelligence requirements
• Define and implement strategies and processes for identification, collection, and processing of prioritized intelligence from external and internal sources and maintain accountability for supplier-provided intelligence providers and tools
• Drive stakeholder engagement and enablement through timely threat briefings and reporting on adversary capabilities and intentions
• Establish and maintain technical workflows to identify intelligence requirements, to prioritize related work, and to deploy analysis or disruption initiatives