ApplySarthiSpecialist, CSIRT
Coinbase
Make my CV for this job, freeView job and applyYour CV, rewritten for this role using only your real experience. Sign in with Google and upload your CV. Nothing to install.
Skills named in this job
Read from the description itself, not inferred.
This role on the market
6 open csirt roles across 6 companies are on ApplySarthi right now.
- Senior Security Engineer - CSIRTJobgether
- Senior CSIRT ConsultantVerizon
- Staff CSIRT AnalystHuntress
- European Cybersecurity Site Leader - SOC & CSIRTIBM
- Senior Incident Responder, Global CSIRTSalesforce
What csirt roles keep asking for: SIEM (50%), AWS (33%), Linux (33%), Azure (17%), Confluence (17%), GCP (17%), Generative AI (17%), Jira (17%) — counted across their open postings here.
Generative AI jobs · Linux jobs · Python jobs · SIEM jobs
Coinbase has 210 open roles listed here.
- Group Product Manager, Money Movement
- Staff Software Engineer (Platform - Financial Engineering)
- IT Support Engineer
- Trade Surveillance Associate
- Risk & Monitoring Analyst III
Counted across 14 company job boards, updated as roles open and close.
Preparing for this interview
Interviews for csirt roles keep coming back to SIEM, AWS, Linux, Azure. Practise those questions before you sit with Coinbase.
Questions you are likely to be asked
- Why do you want to join Coinbase?
- What is your experience with SaaS? Tell me one thing you learned the hard way.
- Tell me about a problem you solved at work that you are proud of.
- Tell me about a time you disagreed with your manager. What happened?
- Where do you want to be in three years?
Prep Sarthi gives you a free mock interview: an AI interviewer asks you questions like these out loud, from your own CV and this job, and shows your score and your weakest answer.
Practise the Specialist, CSIRT at Coinbase interview free →Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
As a Security Operations Specialist on the Security Operations team, you'll defend Coinbase and its customers against some of the most sophisticated attackers in the world. This team - spanning CDRE, Insider Threat, Blockops and Threat Intelligence - protects billions of dollars in digital assets while scaling security coverage for the next billion crypto users. You'll own frontline incident response, build detection and automation capabilities, and partner across the organization to keep Coinbase safe as it launches new Web3 products globally.
What you'll do:
- Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements
- Build and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil
- Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings
- Drive Security monitoring and incident response for emerging Web3 product launches
- Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones
Required Skills and Experience:
- 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments
- Demonstrated ability to identify detection gaps and build coverage across diverse log sources (cloud platforms, SaaS applications, container orchestration, M&A integrations)
- Proficiency scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent)
- Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts
- Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Position ID: P77687
#LI-Remote
Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
Match this job to your CV
ApplySarthi scores your CV against this role, shows the skills you are missing, and writes a tailored version for the application.
Check my match →Similar open roles
- Accountant, CyprusCoinbase
- Accounting Manager, GL Operations & IntercompanyCoinbase
- Accounting Manager, GL Operations & IntercompanyCoinbase
- Accounting Manager, Lending & Credit ProductsCoinbase
- Accounting Manager, Tokenized EquitiesCoinbase
- Analyst, PrivacyCoinbase
- Associate Manager, Internal AuditCoinbase
- Business Operations Senior Associate, InstitutionalCoinbase
Need answers during your interview? Try Live Sarthi.
Live Sarthi, an Interview Sarthi app, shows answer suggestions during the call.
- Hidden from supported screen sharingThe overlay stays out of supported Windows screen captures.
- Answers start in about 1.5 secondsResponse time varies with your connection and model.
- From your own CVYour projects and your experience, not a generic script.
- 30 minutes freeThen ₹99 for a 2-day pass with unlimited calls — you pay for the days you are interviewing, not a subscription.
A Windows app, from the same team as ApplySarthi.
Listed on greenhouse · posted 2026-08-11. ApplySarthi collects openings and links to application pages; the role is advertised by Coinbase, not by us.