Specialist, CSIRT

Coinbase
Mumbai
Workplace: RemoteFull timeINR 2,755,300 - 2,755,300 annuallyFunction: CybersecuritySkills: ["Incident management","Mentoring","Knowledge sharing","Automation mindset","Human oversight"]

Lead second-line incident response for security alerts as part of Security Operations, defending Coinbase and its customers against sophisticated attackers. Own incident management, drive post-incident improvements, and build runbooks that standardize response. Partner across Security Operations to develop monitoring strategies, strengthen detection coverage using SIEM and threat intelligence, and support emerging Web3 product launches while participating in 24/7 rotational coverage.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Coinbase
Coinbase
1 day ago

Specialist, CSIRT

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Lead second-line incident response for security alerts as part of Security Operations, defending Coinbase and its customers against sophisticated attackers. Own incident management, drive post-incident improvements, and build runbooks that standardize response. Partner across Security Operations to develop monitoring strategies, strengthen detection coverage using SIEM and threat intelligence, and support emerging Web3 product launches while participating in 24/7 rotational coverage.
Location: Mumbai
Workplace: Remote
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Own second-line triage and response for security alerts, leading incident management through resolution and driving post-incident improvements.
  • •Build and maintain runbooks for repeatable response patterns, then define and implement automation to reduce manual toil.
  • •Partner with Security Operations teams to develop monitoring strategies informed by attacker investigation findings.
  • •Drive security monitoring and incident response for emerging Web3 product launches.
  • •Strengthen team capabilities by mentoring peers, sharing knowledge, and participating in 24/7 rotational coverage across time zones.

Pay and Benefits

Salary: INR 2,755,300 annually
Equity and Bonus:Equity
Perks:MedicalDentalVision

Key Requirements

  • •3+ years of hands-on security operations experience, including incident response, alert triage, and network/host forensics in cloud, SaaS, and container environments.
  • •Ability to identify detection gaps and build coverage across diverse log sources, including cloud platforms, SaaS applications, container orchestration, and integrations.
  • •Proficiency scripting automation workflows to reduce manual investigation and improve response time (Python, Bash, or equivalent).
  • •Working knowledge of networking fundamentals and operating systems (Windows, Linux, macOS) to analyze host and network-level artifacts.
  • •Experience with SIEM platforms and threat intelligence tooling at scale, including tuning alerts and improving signal-to-noise ratios.
Experience:Security operationsIncident responseCloudSaaSContainers
Skills:Incident managementMentoringKnowledge sharingAutomation mindsetHuman oversight
Languages:English
Tech Stack:PythonBashWindowsLinuxMacOSSIEMThreat intelligence

Company Brief

Coinbase
Operates a cryptocurrency exchange and financial services platform that enables buying, selling, storing, and earning crypto assets, institutional trading, custody, and developer tools for blockchain applications.
Industry: Trading Platforms
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2012
WebsiteLinkedIn