Specialty
The role
Coinbase is hiring a Product Security Engineer on its Application Security team to use frontier AI models for vulnerability discovery, red team internal AI systems and automate security workflows. Coinbase is remote-first, with quarterly in-person working sessions.
What you will do
- Build and maintain custom security scanners that use frontier models to find vulnerabilities at scale
- Lead red teaming of internal AI systems: jailbreaks, prompt injection and tool abuse
- Automate vulnerability triage, validation and remediation for bug bounty and response pipelines
- Work with engineering teams to prioritize, fix and verify critical vulnerabilities
- Mentor junior security engineers on using AI in offensive security
What they ask for
- 3+ years in application security, penetration testing or offensive security, with custom tooling built
- Hands-on use of LLMs to automate security tasks or build scanners
- Experience red teaming AI-based systems
- Deep knowledge of vulnerability classes such as OWASP Top 10 and SANS Top 25
- Proficiency in Python, Go or a similar language for production security tooling
- Uses generative AI responsibly with human oversight
What they offer
- Equity and bonus eligibility on top of base salary
- Medical, dental and vision benefits
- Remote-first with quarterly in-person sessions
This is our own short reading of the posting. The full description, and anything that has changed since, is on Coinbase's careers page behind the apply button.
