Senior Manager, Adversary Management

About the Role

Are you ready to be pushed beyond your perceived capabilities? At Coinbase, our mission is to increase economic freedom globally. This is a significant and ambitious endeavor that requires our best effort daily as we construct the emerging onchain platform and, consequently, the future global financial system. To achieve this mission, we are seeking a candidate who is deeply passionate about our mission and believes in the transformative power of crypto and blockchain technology to revolutionize the financial system. We want individuals eager to make a global impact, who thrive under pressure with high-caliber colleagues, and who actively seek feedback for continuous improvement. We seek those who run towards, not away from, solving the company's most challenging problems.

Our work culture is intense and not for everyone. However, if you aspire to build the future alongside peers who excel in their fields and expect the same from you, there is no better environment. While many Coinbase roles are remote-first, we are not exclusively remote. In-person participation is required throughout the year, with team and company-wide offsites held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported.

Security is a core competency at Coinbase, and the Security Operations team vigilantly monitors all aspects of it. Daily, we engage with sophisticated adversaries to safeguard billions in digital assets and ensure a safe, trusted experience for our customers and employees. As Coinbase expands globally, our team is growing in parallel, utilizing a combination of tooling, automation, and strategic team development to remain well-equipped to protect the next billion users of crypto.

About the Senior Manager, Adversary Management Role

The Senior Manager, Adversary Management is responsible for the strategy, operational oversight, and governance of all cyber threat intelligence at Coinbase, ensuring intelligence support for Security Operations and other Information Security intelligence needs. The ideal candidate will have a profound technical understanding of threat intelligence, cyber-fraud, and both blockchain (Web 3.0) and traditional (Web 2.0) threat landscapes. Reporting to the Senior Director, Security Operations, this leader will be pivotal in safeguarding the Coinbase environment, its products, and its customers by defining and delivering intelligence services that provide actionable intelligence and disrupt threat-actor activities.

To excel, you must possess a battle-hardened technical background with a comprehensive understanding of threat landscapes spanning traditional (Web 2.0) and cutting-edge blockchain technologies (Web 3.0). We seek individuals eager to disrupt threat actors and thwart their efforts. You will be the architect of our long-term and day-to-day strategies, driving the development of our Threat Intelligence and Threat Research teams and services.

What You'll Be Doing

• Lead a team of threat intelligence engineers, cultivating a culture focused on disruption and deflecting threat actors from Coinbase and its customers.
• Set and execute long-term and day-to-day organizational strategies and operational rhythms for Threat Intelligence and Threat Research teams.
• Collaborate with leaders within Security Operations, Information Security, and across the business to define intelligence requirements.
• Define and implement strategies and processes for the identification, collection, and processing of prioritized intelligence from external and internal sources, managing accountability for supplier-provided intelligence and tools.
• Drive stakeholder engagement and enablement through timely threat briefings and reporting on adversary capabilities and intentions.
• Establish and maintain technical workflows for identifying intelligence requirements, prioritizing work, and deploying analysis or disruption initiatives.
• Participate in crypto and community engagements to benchmark team capabilities, identify strategic and tactical requirements, and enhance maturity in cyber and blockchain intelligence.
• Leverage AI across intelligence workflows, from collection and dissemination to actionable intelligence, staying ahead of threat actors utilizing AI.
• Identify and define services and measurements (Gearing Ratio, KPI, KRI) in conjunction with direct subordinates managing daily operations.
• Lead engagements with external intelligence-sharing communities such as FS-ISAC, Crypto ISAC, and SEAL ISAC.
• Maintain, revise, and draft procedures and controls essential for effective risk management and governance across the Threat Intelligence Operations and Automation functions.
• Prioritize mentoring, leadership, and administrative management of assigned personnel, including goal setting, feedback, and performance evaluation.
• Perform other duties and special projects as assigned.

What We Look For In You

• Experience designing, implementing, and operating highly disruptive Threat Intelligence technologies and services, with a deep understanding of investigations and the threat intelligence lifecycle.
• Ability to mentor highly technical threat intelligence analysts, fostering their professional growth and staying current on threat actors, TTPs, and motivations in FinTech or Crypto.
• Proficiency in efficiently leveraging AI agents for threat analysis, building adversary trends, and proactively defining strategies for identifying and recommending disruptive capabilities across SecOps teams.
• Comfortable working cross-functionally with product, IT, and other security stakeholders to design and implement intelligence technologies and services.
• Active awareness of the threat landscape, understanding legal, regulatory, and ethical considerations when handling sensitive information and situations.
• Discreet, thoughtful, and adept at coordinating systemic, cross-functional solutions to mitigate risk.
• Ability to translate complex problems into concise, easily implementable (and preferably automated) solutions.
• Excellent verbal and written communication skills, with the ability to compose briefs and assessments for leadership and train others.
• Team player, comfortable in both novice and expert roles, with high empathy that fosters trust and collaborative problem-solving.
• Demonstrated ability to responsibly use generative AI tools (e.g., LibreChat, Gemini, Glean) in daily workflows, continuously learn, and apply human-in-the-loop practices for efficiency and quality.

Nice to Haves

• Extensive network of intelligence resources and assets contributing to the Coinbase intelligence ecosystem.
• Working or strong understanding of blockchain and other crypto technologies.
• Experience in incident response, risk management, counterintelligence, fraud detection, intellectual property theft, access and identity management, or IT engineering.

Key skills/competency

• Threat Intelligence
• Adversary Management
• Cybersecurity
• Risk Management
• Blockchain Security
• AI in Security
• Security Operations
• Leadership
• Strategic Planning
• Cross-functional Collaboration