Coinbase: Specialist, CSIRT — Remote - India

Coinbase lists a Specialist, CSIRT opening in Remote - India. The job description covers Python, Linux, AI, security operations, incident response.

Recruitment overview

OrganisationCoinbase
Post / roleSpecialist, CSIRT
DepartmentSecurity & Privacy
Employment typeNot specified
Notification / job ID8122777
Job locationRemote - India
Work arrangementRemote
Educational qualificationSee the employer’s role-specific qualification criteria
Experience required3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments
Salary / stipendSee employer notice for pay details
Last date to applySee official notice

About Coinbase

Coinbase works on digital-asset and financial technology, with its recruitment material discussing an open financial system and crypto-related markets. Its advertised business activities connect consumer and business products with engineering, financial operations and regulated-market development. The company describes local product initiatives alongside the compliance, policy and operational work needed to support them. This gives the business both a technology dimension and a financial-services context, with product delivery linked to the requirements of the markets in which it operates.

The position and its setting

Coinbase lists Specialist, CSIRT in Remote - India, under reference 8122777. The details below separate the work described by the employer from essential conditions, preferred experience and practical preparation advice.

  • Department: Security & Privacy
  • Employer listing date: 12 August 2026

Responsibilities and work described

  • Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements
  • Building: and maintain runbooks for repeatable response patterns, then define and implement automation to eliminate manual toil
  • Partner with teams across Security Operations to develop monitoring strategies informed by attacker investigation findings
  • Drive Security monitoring and incident response for emerging Web3 product launches
  • Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones
  • Required Skills and

Essential requirements and candidate background

  • 3+ years of hands-on security operations experience including incident response, alert triage, and network/host forensics across cloud, SaaS, and container environments
  • Identify detection gaps and build coverage across diverse log sources (cloud platforms, SaaS applications, container orchestration, M&A integrations)
  • Proficiency scripting automation workflows that reduce manual investigation and response time (Python, Bash, or equivalent)
  • Knowledge: networking fundamentals and operating systems (Windows, Linux, macOS) sufficient to analyze host and network-level artifacts
  • Experience working with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios
  • Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality
  • Position ID: P77687
  • #LI-Remote
  • Pay Transparency Notice: The target annual base salary for this position can range as detailed below
  • Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision)

Preferred experience and additional strengths

  • ₹2,755,300 — ₹2,755,300 INR
  • Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period
  • US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation
  • Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com
  • Need screen reading technology?
  • Click here to download a free compatible screen reader and view the tutorial
  • Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice
  • US applicants: By submitting your application, you agree to Arbitration of Disputes

Location, schedule and contract conditions

  • Work arrangement: Remote
  • Advertised location: Remote - India

Pay and application dates

A verified salary figure is not established in this article. An online estimate for another Specialist, CSIRT vacancy is not an offer for reference 8122777; use the employer’s own pay disclosure and recruitment communication.

A closing date is not confirmed in this article. Check the current employer page before submitting: an undated posting can change or be withdrawn.

How to apply to Coinbase

Applications follow the official employer page linked below.

Open the official Coinbase posting below and match the title and reference 8122777.

Compare your qualifications and experience with the essential conditions for the Remote - India position, then read the preferred criteria separately.

Prepare an accurate CV and the supporting items requested in that employer’s application. Provide only information and documents you are authorised to share.

Use the employer’s application option, complete the required fields and review the submission. Retain the acknowledgement when one is provided. Job Alerts World does not receive the application.

Practical preparation: Python

Python work is easier to assess through a concrete example than a list of libraries. Explain the problem, the input data, the parts you implemented and how you checked the output. Include a repository or a short technical note when you can share it.

Relevant skills

  • Python
  • AI/ML
  • Linux
  • AI
  • security operations
  • incident response

Important links

Official notification / job descriptionOpen official page

Read the complete official notice before applying. Availability and requirements can change.

For corrections, see our editorial policy and contact information.