2 months ago
Remote, CanadaMid Level
Responsibilities
- Build, deploy, and maintain AI-powered security scanners for large-scale vulnerability discovery.
- Lead red-team testing of internal AI systems, including jailbreak, prompt injection, and tool abuse testing.
- Develop automation for vulnerability triage, validation, remediation, bug bounty, and vulnerability response workflows.
- Collaborate with engineering teams to prioritize, remediate, and verify critical vulnerability fixes.
- Mentor junior security engineers on AI-enabled offensive security practices.
Requirements
- At least 3 years of experience in application security, penetration testing, or offensive security.
- Demonstrated ability to build custom, production-grade security tooling.
- Hands-on experience using LLMs or frontier models for security automation, vulnerability research, or scanner development.
- Experience red teaming AI-based systems, including prompt injection, jailbreak testing, and tool abuse.
- Deep knowledge of OWASP Top 10, SANS Top 25, and production vulnerability identification and exploitation.
- Proficiency in Python, Go, or a similar programming language.
- Ability to use generative AI responsibly with human oversight and measurable workflow improvements.
Benefits
- Remote-first but not fully remote work arrangement, with quarterly in-person working sessions called surges.
- Benefits may include medical, dental, and vision coverage.
- Potential equity and bonus eligibility are mentioned separately from base salary.
Categories
About Coinbase
Coinbase builds a cryptocurrency platform for consumers, institutions, and developers to buy, sell, store, and use digital assets. Its products include the Coinbase app/exchange, Coinbase Prime for institutions, custody services, and developer APIs, and it earns primarily from transaction fees and subscriptions. Founded in 2012 and now remote-first, Coinbase is a public company (NASDAQ: COIN) serving major crypto markets in the U.S. and abroad.