Application Security Engineer II (Contract - 5 months )
Triage and validate vulnerability submissions across managed bug bounty programs, assess their accuracy and severity, communicate with clients and researchers, and escalate critical findings.
Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, itโs a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called โsurges.โ learn more about working at Coinbase.
As an Offensive Security Engineer on the Application Security team within Security, you'll pioneer how Coinbase uses frontier AI models to scale vulnerability discovery, red team AI systems, and automate security workflows. This role bridges traditional penetration testing with next-generation AI-augmented offensive security, directly accelerating our ability to protect products and customers. You'll own the development of AI-driven security tooling and collaborate across Vulnerability Management, Offensive Security, and Incident Response to fundamentally shift how we operate.
What you'll do:
Required Skills and Experience:
Pay Transparency Notice: The target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, and vision).
Triage and validate vulnerability submissions across managed bug bounty programs, assess their accuracy and severity, communicate with clients and researchers, and escalate critical findings.
Own and expand the security program across corporate security, SecOps, compliance, identity, and access, while leading incident response, security tooling, and the SOC 2 audit cycle.
Own and advance security across cloud, AI, data, applications, IT, and incident response, building secure-by-default systems and automations that help employees move quickly while protecting patient data.
As a Security Engineer, you will enhance the security of Shopware products by identifying and mitigating security risks throughout the product development lifecycle.
As an Application Security Engineer, you will enhance security practices by integrating proactive tools, managing a bug bounty program, and fostering a culture of security within the engineering team.