Coinbase is hiring a

Blockchain Security Engineering Manager

Blockchain Security (BlockSec) team’s mission is to Secure funds and data from protocol through wallet. Coinbase has a unique opportunity: enabling our customers to easily and securely interface with blockchains, a.k.a. digital asset networks, a.k.a. cryptocurrencies. Blockchains are a cutting edge technology, with many unique security considerations for any entity that supports interaction with them. Understanding those unique considerations requires deep expertise in blockchains and the ability to maintain that expertise over time.

What you’ll be doing (ie. job duties):

The mission of the Blockchain Security - CryptoSec team to secure product integration with Blockchain. The CryptoSec team assesses security for products supporting Staking, DeFi protocols, Cryptography, NFT, Wallet, and Blockchain Interoperability for multi-chains.

What you’ll be doing:

• Program Development. We’re looking to you to expand and formalize our Blockchain Secure Architecture and Engineering Program. As Coinbase has grown, our Product Security function has developed organically. This program drives our Security bar across our backend Cryptocurrency architecture. The purpose is to prevent the likelihood and impact of security breaches through high quality assessments and successful remediation of security vulnerabilities.
• Team Management. Any team is only as strong as the individuals it’s composed of. Your primary concern will be the growth, development and health of the team. You’ll nurture the team, mentor them and unblock them. You’ll help your teammates find work they enjoy, and find ways to get through the work they don’t. We’ll ask you to hire more individuals to your team, so you’ll need to identify what skills and personalities you need to get the job done. Set clear targets and objectives, and establish KPIs for the team.
• Operations. Finally, we’re looking for someone who will be accountable to the operations of the team. You’ll work with your leadership to develop goals and metrics, and then we expect you to hold yourself accountable to them. Your quality bar defines the quality of the team, and we’re expecting yours to be high. From timelines to reviews, you’ll work to make sure the Security Assessments team runs smoothly. We’ll also ask you to coordinate external penetration testing engagements as we need them. You’ll spend a significant amount of time communicating to your team, to your peers, and across the company.

What we're looking for in you:

• At least 3 years experience in managing product or application security teams that have had to adapt to the changing needs of a business experiencing rapid growth
• At least 6 years experience and solid foundation in security
• You are passionate about growing people and helping them achieve their goals
• You’ll be providing support and mentorship for application security engineers, so you’ll need to have enough experience in the field to guide them as they grow.
• From time to time, you may take on a review project for yourself to keep your skills relevant
• We look for individuals who are clear, direct, and kind in their communications.
• Ability to communicate with technical SMEs and non-technical stakeholders in order to drive alignment.
• You have an energy and self-drive for continuous learning as Crypto is a constantly and rapidly changing space
• Ability to do both long term thinking and short term planning
• We’ll need a manager capable of becoming a SME in one of our product technical architecture. This requires deep technical experience in software development, asymmetric encryption, and security
• Building stakeholder relationships is a crucial aspect of the role. A successful candidate will use every interaction as an opportunity to build trust through effective, positive, and efficient communication

Nice to haves:

• You have experience in cryptography or blockchain technology
• If you have extensive experience securing large Rails, NodeJS, and Golang codebases, we can immediately start applying what you’ve learned to the code we are asked to secure. Even better if you’ve spent time training others on how to secure those codebases.
• If you’re fluent in Digital Assets, you’ll have less to learn about the fundamentals of our business, but we do not immediately decline candidates who are not totally fluent.

#LI-Remote

Req ID: G2233

Apply Now: