The security team ensures our technology maintains the high bar that has earned us the trust of millions of users who are buying, selling and storing billions of dollars worth of digital assets in our products. Additionally, we protect the company and its employees from the numerous risks that they face, enabling them to work productively and safely using state of the art tooling. We’re looking for kindred souls who believe security is collaborative and prevention is the only scalable security solution.

What you’ll be doing:

• You will develop deep empathy for employees and other stakeholders, and balance security with business needs based on a “long-term pain minimization” ethic.
• Evangelize security and privacy awareness and education at Coinbase through speaking, writing, and high quality documentation.
• Work with Security leadership to develop risk frameworks and apply concierge security and privacy solutions for high risk groups, balancing productivity, feasibility at scale, risk, cost, and other tradeoffs as appropriate.
• Perform original privacy controls research based on a highly dynamic threat environment.
• Analyze the business opportunities, vendor solutions, and potential implementations with the engineering teams to provide feasibility and cost inputs. We'll rely on you to determine the security robustness requirements of the problem, and the capability of a given solution meeting those requirements.
• Grant and manage security exceptions to closure while maintaining a strong “customer-centric” communications ethic.
• Make decisions around the declaration and management of security incidents relevant to your area as appropriate. (This is not an on-call role, however.)
• Create threat models for systems you’re responsible for, and leverage them to prioritize time based on risk impact.
• Educate and train teams and individuals on security and privacy topics and skills to extend Corporate Security’s reach by empowering other employees to help themselves. 

What we look for in you:

• Our hiring process tests your competencies in our core technical skillset as described in the ‘what you’ll be doing’ section. Having a history exhibiting high quality execution in our core competencies will help your case.
• Extraordinary written and verbal communication skills, especially in the production of high quality, easy to follow documentation.
• A history of program management, including going “from zero to one” in building new programs.
• Comfort and speed in understanding the technicals of many disparate technologies, our implementations of them, and how they fit into the larger enterprise, security, and privacy threat models.
• Drive organizational change to ensure that Coinbase remains at least one step ahead of our attackers, managing upwards and cross team as appropriate.

Nice to haves:

• Experience working in a high security and/or highly regulated industry. We would love to have you take the essentials of what you’ve learned and apply them to the unique challenges Coinbase faces in Digital Assets.
• Early career experience working in a service background such as customer service, help desk, etc.
• Familiarity with basic Physical Security principals.
• If you’re fluent in Digital Assets, you’ll have less to learn about the fundamentals of our business, but we do not decline candidates who are not fluent.
• Software engineering experience in addition to Security experience.