Product Security Engineer

Description

Description : Requisition Status : Pending

Status Reason : Pending Sourcing

Reason : Replacement

Reason Detail : Manager :

Department : Security Advisory Services : 507102

Job Category : Security

Job Code : CW-SEC-CTR : Contractor

Job Title : Product Security Engineer

Keywords :

Number of Positions : 1

Remaining Positions : 1

Job Description :

Product Security Engineer - CTR About the Role The Product Security org at Coinbase is looking to hire a Product Security Engineer to work closely with engineers, technical product managers and leadership on designing secure products from the ground up. In this role, you will be responsible for performing security-focused architecture reviews, threat modeling, and secure code reviews for upcoming Coinbase products and / or features that will be used by millions of customers. Key Responsibilities : ? Perform security design reviews and threat modeling of upcoming features and products. ? Perform security code reviews, identify security vulnerabilities, propose fixes and work with engineering on the implementation and deployment of bespoke mitigations. ? Identify top product risk areas and lead risk-reduction initiatives with cross-functional teams. ? Support engineering teams through timely secure design consultations, vulnerability analysis, and bug fix verification. ? Improve and / or automate existing processes to increase efficiency. Qualifications : ? A degree in Computer Science, Computer Systems Engineering, or a related field. ? 3+ years of experience performing security design reviews and threat modeling of products and features. ? Expertise in Web and Network Security ? Exposure to Blockchain Security ? Experience in at least one of : Go, Ruby or Python. ? Strong communication skills ? Excellent problem-solving skills ? Ability to translate technical security requirements and risks into terms that anyone can understand. ? Ability to work independently and handle multiple tasks concurrently.

Security reviews, Architecture reviews and Threat modelling

Looks into any problem / security issues, should be able to explain in non tech language.

Good judgement to identify what issues are critical.

Clearly articulate, be specific, do not give multiple options as a solution to the problem.

3 rounds of interview.

high level tech questions

1st round - with HM, 15 minutes, getting to know candidate's background and some tech questions

2nd round - senior engineer, real time scenarios will be presented

3rd round - Senior Manager, real time scenarios will be presented

Attachments : ProductSecurityEngineerCTR_JobDescription.pdf

Duties : None

Skills : None

Education : None