Senior Offensive Security Engineer

About the Role: Senior Offensive Security Engineer at Coinbase

At Coinbase, our mission is to increase economic freedom in the world by building the emerging onchain platform and the future global financial system. This ambitious goal requires passionate, high-caliber individuals eager to leave their mark and solve the company’s hardest problems. While Coinbase operates on a remote-first basis, in-person participation for team and company-wide offsites is required multiple times annually.

The Opportunity in Application Security

The Application Security organization is seeking a highly skilled and experienced Senior Offensive Security Engineer, specializing in Penetration Testing. The ideal candidate will have a proven track record in assessing and securing the digital security of physical spaces, along with an active, current, or recently expired security clearance and demonstrated experience working with executives at large companies.

What You'll Be Doing

• Assess the digital security posture of physical spaces (e.g., labs, offices), focusing on IOT/IOT automation and prosumer networking gear.
• Conduct comprehensive penetration tests on networked devices, including hardware, firmware, and their integrations.
• Identify and exploit vulnerabilities within ecosystems, providing detailed reports and actionable recommendations for remediation.
• Collaborate closely with security and development teams to embed security best practices throughout the device lifecycle.
• Stay abreast of the latest security threats, vulnerabilities, and industry best practices for securing physical spaces.
• Present complex findings and strategic recommendations to both technical and non-technical stakeholders, including executive leadership.

What We Look For In You

• Active, current, or recently expired security clearance.
• 2+ years of experience engaging with C-Suite executives at S&P 500 organizations.
• Proven expertise in penetration testing across the full threat spectrum, from common criminal actors to sophisticated Advanced Persistent Threats (APTs) and nation-state actors.
• Demonstrated expertise in penetration testing the full digital security of physical spaces, including Building Management Systems (BMS), Physical Access Control Systems (PACS), IoT/home automation devices, wireless protocols (LoRaWAN, Bluetooth, Zigbee, etc.), and networked security infrastructure (e.g., IP cameras and alarms).
• Extensive experience working with executives within large, complex organizations.
• Strong understanding of networking protocols, architectures, security frameworks, and building security best practices.
• Proficiency with various penetration testing tools and methodologies.
• Exceptional communication and report-writing skills.
• Flexibility to travel occasionally, as required by business needs.

Nice to Haves

• Participation in computer security competitions (CTFs), Bug Bounty programs, or open-source security research.
• Experience in Web3 security, network security, and/or cloud security.
• Experience with developing and implementing security tooling to support penetration testing and AI penetration testing activities.
• Experience pentesting AI systems and Large Language Models (LLMs).

Key skills/competency

• Penetration Testing
• IOT Security
• Network Security
• Physical Security Assessment
• Vulnerability Exploitation
• Security Clearance
• Executive Communication
• Threat Intelligence
• Security Best Practices
• Reporting & Remediation