Security Engineer, Corporate Security

Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.

Coinbase Corporate Security (CorpSec) is seeking a Security Engineer to build and maintain security controls that protect corporate infrastructure, user devices, enterprise applications, and network communications. You'll partner closely with IT and engineering teams to identify risks and ship tailored solutions that keep users secure without introducing unnecessary friction, directly protecting Coinbase's most sensitive data and critical assets.

What you'll do:

• Design, implement, and maintain security solutions to harden Coinbase's macOS, Chromebook, and mobile endpoints, focusing on secure configurations, compliance, threat detection, and user experience.
• Perform security reviews on enterprise systems and software that enable user productivity across the corporate environment.
• Collaborate with cross-functional partners to integrate endpoint and SaaS security into broader corporate engineering initiatives.
• Identify and close data exfiltration paths introduced by local AI agents and developer tooling (e.g., coding assistants, LLM harnesses) running on corporate endpoints.
• Provide technical guidance and code review support to engineers on the CorpSec team, raising the security bar across the organization.

Required Skills and Experience:

• 3+ years of experience in security engineering, with at least 2 years securing macOS or similar user endpoints in an enterprise environment.
• Proven ability to write production code (services, integrations, automations) that supports corporate infrastructure security.
• Experience scoping, prioritizing, and shipping security projects end-to-end with minimal direction in fast-moving environments.
• Familiarity with device trust, zero trust network access, or endpoint communication security products (e.g., Cloudflare, Prisma Access, Zscaler).
• Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.

Position ID: P78687

#LI-Remote

Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).

Annual base salary range (excluding equity and bonus):