- Level
- Mid level
- Experience
- 3+ years
- Work style
- Remote
- Area
- Security engineering
At a glance
The role in plain English
This Security Engineer role at Coinbase focuses on securing corporate endpoints and infrastructure, particularly macOS, Chromebooks, and mobile devices. The position suits candidates with strong technical backgrounds in endpoint security and experience writing production code. Day-to-day tasks include designing and maintaining security controls, collaborating with IT and engineering teams, and reviewing enterprise systems for security risks. The work is remote within the USA, with occasional in-person sessions.
What you'll do
- Design and maintain security controls for endpoints and infrastructure
- Review enterprise systems and software for security risks
- Collaborate with IT and engineering teams on security initiatives
- Identify and mitigate data exfiltration paths from AI agents and developer tools
- Provide technical guidance and code review to CorpSec engineers
What they're looking for
Essential
- 3+ years security engineering experience
- 2+ years securing macOS or similar endpoints
- Ability to write production code for security purposes
- Experience delivering security projects with minimal direction
- Familiarity with device trust or endpoint security products
Core skills
- macOS security
- Endpoint security
- Production code
- Threat detection
- Zero trust
- Device trust
- Cloudflare
- Zscaler
The shape of the job
Technical depth
4/5
Pace
4/5
Ownership
4/5
Teamwork
3/5
Cyberend's reading of the listing, not the employer's own scores.
Application toolkit
Make your application count
See which requirements your CV meets and what is missing.
Your CV is used for this answer only and never stored.
Questions to prepare for
- 01Describe your experience securing macOS endpoints in an enterprise environment.
- 02How have you implemented zero trust or device trust solutions?
- 03Give an example of a security project you delivered with minimal direction.
- 04How would you identify and mitigate data exfiltration risks from AI tools on endpoints?
About Coinbase
Coinbase provides a platform for digital currency exchange and related financial services. The company operates remotely with periodic in-person collaboration sessions.
Full job descriptionAs published by Coinbase
Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase .
Coinbase Corporate Security (CorpSec) is seeking a Security Engineer to build and maintain security controls that protect corporate infrastructure, user devices, enterprise applications, and network communications. You'll partner closely with IT and engineering teams to identify risks and ship tailored solutions that keep users secure without introducing unnecessary friction, directly protecting Coinbase's most sensitive data and critical assets.
What you'll do:
- Design, implement, and maintain security solutions to harden Coinbase's macOS, Chromebook, and mobile endpoints, focusing on secure configurations, compliance, threat detection, and user experience.
- Perform security reviews on enterprise systems and software that enable user productivity across the corporate environment.
- Collaborate with cross-functional partners to integrate endpoint and SaaS security into broader corporate engineering initiatives.
- Identify and close data exfiltration paths introduced by local AI agents and developer tooling (e.g., coding assistants, LLM harnesses) running on corporate endpoints.
- Provide technical guidance and code review support to engineers on the CorpSec team, raising the security bar across the organization.
Required Skills and Experience:
- 3+ years of experience in security engineering, with at least 2 years securing macOS or similar user endpoints in an enterprise environment.
- Proven ability to write production code (services, integrations, automations) that supports corporate infrastructure security.
- Experience scoping, prioritizing, and shipping security projects end-to-end with minimal direction in fast-moving environments.
- Familiarity with device trust, zero trust network access, or endpoint communication security products (e.g., Cloudflare, Prisma Access, Zscaler).
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Position ID: P78687
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
Annual base salary range (excluding equity and bonus):
$152,405 — $179,300 USD
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights , Know Your Rights , and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial .
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice . US applicants: By submitting your application, you agree to Arbitration of Disputes .