Role overview

Coinbase is seeking a Product Security Engineer to join the Application Security team within Security & Privacy. In this role, you will pioneer the integration of advanced AI models into offensive security operations, combining traditional penetration testing with cutting-edge AI-driven vulnerability discovery and automation to protect Coinbase’s products and customers.

Key responsibilities

Build, deploy, and maintain custom security scanners that use frontier AI models to identify vulnerabilities across Coinbase’s product surface at scale.
Lead red team efforts against internal AI systems, including jailbreak testing, prompt injection analysis, and tool abuse simulation.
Develop AI-powered automation for vulnerability triage, validation, and remediation workflows to accelerate bug bounty and vulnerability response processes.
Work with engineering teams to prioritize, fix, and verify resolutions for critical vulnerabilities discovered through AI-augmented and manual testing approaches.
Mentor junior security engineers on integrating AI into offensive security workflows to enhance team capabilities.

Requirements

Minimum 3 years of experience in application security, penetration testing, or offensive security with a demonstrated ability to develop custom security tooling.
Hands-on experience with large language models or frontier AI models to automate security tasks, scale vulnerability research, or build security scanners.
Proven experience red teaming AI-based systems through prompt injection, jailbreak testing, and tool abuse scenarios.
Strong understanding of common vulnerability classes including OWASP Top 10 and SANS Top 25, with a track record of identifying and exploiting vulnerabilities in production environments.
Proficiency in at least one programming language such as Python or Go, with experience writing production-grade security tools.
Ability to use generative AI responsibly while maintaining human oversight to deliver business-ready outputs and drive measurable improvements in efficiency, cost, and quality.

What makes this role worth considering

This position offers the opportunity to work at the intersection of security and artificial intelligence, directly shaping how a major financial technology platform scales its defensive capabilities. You will collaborate across multiple security functions and have the chance to mentor others while pioneering new approaches to vulnerability discovery and response. Coinbase operates as a remote-first company with quarterly in-person working sessions designed to foster intense collaboration.