Senior Onchain Investigator
Coinbase · Remote - USA
About this role
**Company:** Coinbase **Team:** Threat Intelligence (Security Operations) **Work model:** Remote-first (quarterly in-person “surges”) **Position ID:** P77608 **Location:** #LI-Remote **Compensation:** $180,370–$212,200 USD annual base salary (excluding equity/bonus; benefits included) --- ## About the role As a **Senior Onchain Investigator**, you’ll own **end-to-end onchain investigations** into threat actors targeting **Coinbase** and the broader **crypto ecosystem**. You’ll cluster illicit wallets, combine **OSINT** with onchain evidence, and turn findings into **detections, blocks, and decisions** that protect customers and products. This role also **leads investigation methodology** across the team. ## What you’ll do - Own complex onchain investigations into threat actor infrastructure, scam networks, exploits, and related abuse targeting **Coinbase** and **Base** - Drive clustering and attribution of illicit actors using blockchain analytics, OSINT, and internal data; operationalize results into **Vertex Synapse** and downstream controls - Build OSINT and onchain analysis pipelines, queries, and dashboards to automate detections and scale investigative capacity - Lead post-incident reviews and root cause analyses; recommend enhancements to controls, detection, and overall security posture - Partner with product, engineering, and risk teams to embed threat and abuse mitigation into the product lifecycle (ideation → launch) - Lead new investigative techniques, teach them across Security, and brief executives with clear risk, impact, and recommended actions ## Required skills & experience - **5+ years** of investigations, including **3+ years** investigating onchain illicit activity, crypto abuse, or blockchain intelligence; proven ability to independently lead investigations from collection through stakeholder action - Deep knowledge of blockchain ecosystems and protocols (tracing across chains, bridges, mixers, and laundering patterns) - Proficiency with **Python or Go** and **SQL** for analysis, scripting, and tooling for intelligence workflows/automation - Track record of creating investigation methods, dashboards, or pipelines adopted by other investigators - Ability to translate complex technical analysis into clear, actionable intelligence for technical and non-technical stakeholders (including executives) - Skilled in **OSINT** research across a wide range of topics - Uses **generative AI responsibly** with human oversight to deliver business-ready outputs and measurable improvements in efficiency, cost, and quality --- ## Notes - **Application limit:** Maximum of **3 applications within a 6-month period** - **Equal opportunity employer:** Coinbase considers qualified applicants regardless of protected status; criminal histories considered consistent with applicable laws - **Accommodations:** If you need a reasonable accommodation, email **accommodations[at]coinbase.com**
Listing freshness
CronJobs last confirmed this listing 58m ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.