Offensive Security Engineer - Remote

Overview

As an Offensive Security Engineer at Coinbase, you will be responsible for managing and optimizing the bug bounty program, collaborating with security teams and whitehat hackers to enhance the company's security posture.

In Short

• Participate in bug bounty triage and validation.
• Develop strategies to attract high-quality bug submissions.
• Manage bug bounty program operations.
• Analyze bug bounty data for trends and improvements.
• Collaborate with engineering teams on vulnerability remediation.
• Mentor junior security engineers.
• Provide on-call support for critical incidents.
• Document bug bounty metrics and effectiveness.
• Conduct internal penetration testing engagements.
• Participate in red team activities.

Requirements

• Bachelor’s degree in Computer Science or related field.
• Relevant security certifications (e.g., OSCP, GPEN).
• Experience in programming languages like Go, JavaScript, Python, or Ruby.
• 2+ years in application security or offensive security roles.
• Understanding of Web2 security concepts and common vulnerabilities.
• Experience with bug bounty programs.
• Strong analytical skills.
• Excellent communication skills.
• Passion for security and program improvement.
• Ability to work independently.

Benefits

• Opportunity to work in a dynamic environment.
• Collaborate with high-caliber colleagues.
• Contribute to the future of financial systems.
• Access to professional development resources.
• Flexible working conditions.