Coinbase: Specialist, CSIRT — Remote - India
Coinbase lists a Specialist, CSIRT opening in Remote - India. The job description covers Python, Linux, AI, security operations, incident response.
Recruitment overview
| Organisation | Coinbase |
|---|---|
| Post / role | Specialist, CSIRT |
| Department | Security & Privacy |
| Employment type | Not specified |
| Notification / job ID | 8122777 |
| Job location | Remote - India |
| Work arrangement | Remote |
| Educational qualification | See the employer’s role-specific qualification criteria |
| Experience required | 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments |
| Salary / stipend | See employer notice for pay details |
| Last date to apply | See official notice |
About Coinbase
Coinbase works on digital-asset and financial technology, with its recruitment material discussing an open financial system and crypto-related markets. Its advertised business activities connect consumer and business products with engineering, financial operations and regulated-market development. The company describes local product initiatives alongside the compliance, policy and operational work needed to support them. This gives the business both a technology dimension and a financial-services context, with product delivery linked to the requirements of the markets in which it operates.
The position and its setting
Coinbase lists Specialist, CSIRT in Remote - India, under reference 8122777. The details below separate the work described by the employer from essential conditions, preferred experience and practical preparation advice.
- Department: Security & Privacy
- Employer listing date: 12 August 2026
Responsibilities and work described
- Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements
- Building: and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil
- Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings
- Drive Security monitoring and incident response for emerging Web3 product launches
- Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones
- Required Skills and
Essential requirements and candidate background
- 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments
- Identify detection gaps and build coverage across diverse log sources (cloud platforms, SaaS applications, container orchestration, M&A integrations)
- Proficiency scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent)
- Knowledge: networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts
- Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality
- Position ID: P77687
- #LI-Remote
- Pay Transparency Notice: The target annual base salary for this position can range as detailed below
- Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision)
Preferred experience and additional strengths
- ₹2,755,300 — ₹2,755,300 INR
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com
- Need screen reading technology?
- Click here to download a free compatible screen reader and view the tutorial
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice
- US applicants: By submitting your application, you agree to Arbitration of Disputes
Location, schedule and contract conditions
- Work arrangement: Remote
- Advertised location: Remote - India
Pay and application dates
A verified salary figure is not established in this article. An online estimate for another Specialist, CSIRT vacancy is not an offer for reference 8122777; use the employer’s own pay disclosure and recruitment communication.
A closing date is not confirmed in this article. Check the current employer page before submitting: an undated posting can change or be withdrawn.
How to apply to Coinbase
Applications follow the official employer page linked below.
Open the official Coinbase posting below and match the title and reference 8122777.
Compare your qualifications and experience with the essential conditions for the Remote - India position, then read the preferred criteria separately.
Prepare an accurate CV and the supporting items requested in that employer’s application. Provide only information and documents you are authorised to share.
Use the employer’s application option, complete the required fields and review the submission. Retain the acknowledgement when one is provided. Job Alerts World does not receive the application.
Practical preparation: Python
Python work is easier to assess through a concrete example than a list of libraries. Explain the problem, the input data, the parts you implemented and how you checked the output. Include a repository or a short technical note when you can share it.
Relevant skills
- Python
- AI/ML
- Linux
- AI
- security operations
- incident response
Important links
| Official notification / job description | Open official page |
|---|
Read the complete official notice before applying. Availability and requirements can change.
For corrections, see our editorial policy and contact information.