Greenhouse ·
full-timeProduct Security Engineer
Coinbase · Remote - Canada
Coinbase operates a cryptocurrency exchange and related financial‑services platform that enables users to buy, sell, and store digital assets. As a Product Security Engineer intern on the Application Security team, you will work on integrating frontier AI models into offensive security practices. Day‑to‑day tasks include building and maintaining custom security scanners that use large language models to spot vulnerabilities across Coinbase’s product surface, leading red‑team exercises against internal AI systems (such as jailbreak and prompt‑injection testing), and creating AI‑driven automation for vulnerability triage, validation, and remediation to speed up bug‑bounty and response pipelines. You will also collaborate with engineering groups to prioritize and verify fixes for critical findings, and mentor junior engineers on applying AI to security workflows. The role suits candidates with a background in application security or penetration testing, hands‑on experience using LLMs to build security tools, proficiency in Python or Go, and a solid grasp of common vulnerability classes such as the OWASP Top 10.
Ready to do the most impactful work of your career? At Coinbase , we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase . As an Offensive Security Engineer on the Application Security team within Security, you'll pioneer how Coinbase uses frontier AI models to scale vulnerability discovery, red team AI systems, and automate security workflows. This role bridges traditional penetration testing with next-generation AI-augmented offensive security, directly accelerating our ability to protect products and customers. You'll own the development of AI-driven security tooling and collaborate across Vulnerability Management, Offensive Security, and Incident Response to fundamentally shift how we operate. What you'll do: Build, deploy, and maintain custom security scanners that leverage frontier models to detect vulnerabilities at scale across Coinbase's product surface. Lead red teaming efforts against internal AI systems, including jailbreak testing, prompt injection analysis, and tool abuse simulation. Develop AI-driven automation for vulnerability triage, validation, and remediation workflows to accelerate the bug bounty and vulnerability response pipelines. Partner with engineering teams to prioritize, remediate, and verify fixes for critical vulnerabilities discovered through AI-augmented and manual testing. Mentor junior security engineers on integrating AI into offensive security workflows to scale team capabilities. Required Skills and Experience: 3+ years of experience in application security, penetration testing, or offensive security with demonstrated ability to build custom security tooling. Hands-on experience using LLMs or frontier models to automate security tasks, scale vulnerability research, or build security scanners. Demonstrated experience red teaming AI-based systems (prompt injection, jailbreak testing, tool abuse). Deep understanding of common vulnerability classes (OWASP Top 10, SANS Top 25) and proven track record identifying and exploiting them in production environments. Proficiency in at least one programming language (Python, Go, or similar) with experience writing production-grade security tooling. Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality. Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision). Annual base salary range (excluding equity and bonus): $154,000 — $154,000 CAD Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period. Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws. US Applicants: View Employee Rights , Know Your Rights , and E-Verify Notice of Participation. Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial . Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice . US applicants: By submitting your application, you agree to Arbitration of Disputes .
| Role | Product Security Engineer |
|---|---|
| Company | Coinbase |
| Location | Remote - Canada |
| Compensation | Not disclosed |
| Posted | 2026-09-28 |
| Deadline | Rolling |
Typical process for this type of role
A general guide — the exact steps for this specific listing may vary; check the original posting for details.
- 1ApplicationSubmit your resume through the apply link.
- 2ScreeningRecruiter reviews your background against the role.
- 3AssessmentA technical test, assignment, or coding round, depending on the role.
- 4Interview(s)One or more rounds with the hiring team.
- 5OfferOffer letter with compensation and start date.
Before you apply
0/4More at Coinbase
Other jobs at Coinbase
- Corporate Development Manager · Remote - USA
- Senior Accountant · Remote - UAE
- Broker Dealer Operations, Associate · Remote - USA
- Senior Software Engineer (institutional, Settlements & Transfers) · Remote - USA
- Senior Producer · Remote - USA
Explore Related Placements
// similar opportunities
You might also like
Staff Product Security Engineer
Dashlane
About Dashlane Dashlane’s mission is to deliver the credential security every business and employee needs to thrive. Millions of consumers, and over 25,000 bran...
Security Engineer
Namespace
Join our mission We're proud to work with many incredible companies, accelerating their ability to build their products. We've spent years watching talented eng...
Security Engineer
Lemfi
LemFi (Series B) is building the go-to financial app for the Global South. Moving to a new country shouldn’t mean starting from zero. That's why our team of 400...
Product Security Engineer - Lead Engineer
Japan Dev
Product Security Engineer - Lead Engineer...
0-1 year experience eligible.
Senior Staff Engineer, Product Security
Druva
About Druva Druva is the resilience foundation for the AI enterprise, helping organizations secure and recover from connected risk across data, cyber, identity,...
Product Engineer
Porters
The Context Banks still run their most critical, regulated work by hand; reading letters and emails, re-keying data between systems, chasing down missing info. ...