This description is a summary of our understanding of the job description. Click on 'Apply' button to find out more. Role Description Woolpert is hiring an Environmental, Health & Safety (EHS) Specialist to join our dynamic EHS Team. This position reports to the North America EHS Manager and is responsible for supporting the development, implementation, and continuous improvement of the company’s EHS programs across project sites and office locations. - Monitor EHS performance across project sites and assist in implementing corrective actions where required. - Provide EHS support to project management, field operations, and subcontractors. - Assist in delivering safety orientations, toolbox talks, and EHS-related training. - Support compliance with applicable U.S. regulations (e.g., OSHA 29 CFR 1910/1926, EPA environmental requirements, state/local regulations). - Assist with maintaining company EHS programs, manuals, and management systems. - Participate in incident/near-miss reporting, root-cause investigation, and corrective action follow-up. - Conduct trainings, site inspections, audits, and hazard assessments. - Support collection and analysis of safety metrics, leading indicators, and documentation. - Respond to field inquiries, emails, and safety-related communications, which may require after-hours support. - Coordinate with project teams to ensure safe work planning and risk mitigation. - Assist in environmental compliance tasks (waste management, stormwater Best Management Practices (BMPs), spill response, etc.). - Periodically travel to job sites and company locations as required. Travel Requirements - Must be able to travel up to 30% of the time for business purposes, including project site visits. - Travel may include occasional overnights and weekends based on business needs. Qualifications - Associate’s or higher-level degree in Occupational Safety, Environmental Science, Industrial Hygiene, Engineering, Environmental Health, or related field required. - Working knowledge of OSHA 1910/1926 standards and basic environmental compliance concepts. - Proficiency with MS Office (Word, Excel, PowerPoint, Outlook) and other SaaS tools. - Strong communication, interpersonal, and problem-solving skills. - Ability to collect data, analyze issues, and recommend improvements. - Ability to work independently while supporting multiple project teams. - Strong organization and time management abilities. - Willingness to work in field settings, including active construction sites. - EHS-related certifications (e.g., CHMM, CSP, ASP, GSP, etc.) preferred. - Knowledge of ISO 45001 / ISO 14001 preferred. Benefits - Freedom to Work program: Set your own schedule and location (as appropriate). - Principal program: Earn the opportunity to become an owner of the firm. - Flexible paid time off/vacation: Take time off when it makes sense for you and your team. - Career development: Explore a wide range of learning and growth opportunities within and across industries. - Health, life, vision, and dental insurance: Cover all your medical bases. - Paid sick time, retirement plan, fitness reimbursement, pet insurance, identity protection, technology stipend, employee assistance program, and more!

Ready to be pushed beyond what you think you’re capable of? At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform — and with it, the future global financial system. To achieve our mission, we’re seeking a very specific candidate. We want someone who is passionate about our mission and who believes in the power of crypto and blockchain technology to update the financial system. We want someone who is eager to leave their mark on the world, who relishes the pressure and privilege of working with high caliber colleagues, and who actively seeks feedback to keep leveling up. We want someone who will run towards, not away from, solving the company’s hardest problems. Our work culture is intense and isn’t for everyone. But if you want to build the future alongside others who excel in their disciplines and expect the same from you, there’s no better place to be. While many roles at Coinbase are remote-first, we are not remote-only. In-person participation is required throughout the year. Team and company-wide offsites are held multiple times annually to foster collaboration, connection, and alignment. Attendance is expected and fully supported. Security is a primary competency at Coinbase, and the Security Team keeps a watchful eye over every aspect of it. Every day, we go to battle against some of the most sophisticated attackers in the world to protect billions of dollars worth of digital assets and ensure that our customers and employees can enjoy a safe, trusted experience. As Coinbase scales globally, our team is scaling along with it, using a blend of tooling, automation, and strategic team growth to ensure that we’re well-equipped to protect the next billion users of crypto. Blockchain Security (BlockSec) team’s mission is to secure funds and data from protocols to wallets. Coinbase has a unique opportunity: enabling our customers to easily and securely interface with blockchains, a.k.a. digital asset networks, a.k.a. cryptocurrencies. Blockchains are a cutting edge technology, with many unique security considerations for any entity that supports interaction with them. Understanding those unique considerations requires deep expertise in blockchains and the ability to maintain that expertise over time. What you’ll be doing (ie. job duties): To be completed by all business teams except Eng. - Identify gaps in our Crypto-Security infrastructure and drive cross-function efforts to address them - Perform security assessments, framework development, and threat modeling of assets, including various blockchain protocols, smart contracts, and other distributed ledger tech - Partner with software engineering teams to advise on code and architecture for internal smart contract development - Partner with internal tooling teams to drive the roadmap and vision for internal Coinbase blockchain security tools - Identify automation opportunities in our tooling and processes, deliver a Proof of Concept, and write detail technical requirements - Investigate impactful changes to the space, blockchain upgrades, and novel innovations such as zero-knowledge proofs and bleeding-edge blockchain protocols - Publish blogs and give talks (internal and external) on newfound vulnerabilities, incident investigations, unique integration risks, and related topics What we look for in you (ie. job requirements): To be completed by all business teams except Eng. - Strong understanding of blockchains (particularly EVM chains) and highly “crypto forward” - 4+ years of experience in security engineering, with significant focus on blockchain, distributed systems, or cryptographic infrastructure security - Extensive experience in architecture and threat modeling of security-critical backend crypto systems - Expertise in Application Security and cryptography, including applied knowledge of cryptographic primitives used in blockchain protocols (signing schemes, hash functions, zero-knowledge proofs, MPC) - Familiar with all the fundamentals of onchain activity – blockchain explorers, funds tracing, bridging, DEXs, NFTs, smart contracts - Familiar with recent innovations such as restaking and the various EIPs currently being considered - Ability to provide leadership and mentorship to coworkers - Experience in a highly cross-functional role and/or leading a team - Excellence in clear, direct, and kind communication with technical and non-technical stakeholders, including the ability to translate complex security risks into actionable guidance for leadership - Experience with using AI/agentic tooling (Claude Code, Cursor, GPT Codex, etc.) - Demonstrates the ability to responsibly use generative AI tools and copilots (e.g., LibreChat, Gemini, Glean) in daily workflows, continuously learn as tools evolve, and apply human-in-the-loop practices to deliver business-ready outputs and drive measurable improvements in efficiency, cost, and quality. Nice to haves: - Knowledge of security architecture of non-EVM based blockchains - Deep understanding of cryptography such as zk-SNARKs, FHE and MPC - Experience in at least one of: MongoDB, Snowflake, Databricks, Dune Position ID: P76182 #LI-Remote Pay Transparency Notice: Depending on your work location, the target annual base salary for this position can range as detailed below. Total compensation may also include equity and bonus eligibility and benefits (including medical, dental, vision and 401(k)). Annual base salary range (excluding equity and bonus): $186,065—$218,900 USD Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying. Commitment to Equal Opportunity Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the Employee Rights and the Know Your Rights notices by clicking on their corresponding links. Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law. Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations[at]coinbase.com to let us know the nature of your request and your contact information. For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here). Global Data Privacy Notice for Job Candidates and Applicants Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required. For US applicants only, by submitting your application you are agreeing to arbitration of disputes as outlined here. AI Disclosure For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description. For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate. The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com

• Own and continuously mature the enterprise Information Security Program. • Align controls and architecture with NIST CSF, NIST 800-53, FFIEC guidance, PCI DSS, and SOC requirements. • Conduct proactive program assessments and identify security gaps before they become issues, working cross-functionally to execute upon risk mitigation objectives. • Develop and execute a multi-year security roadmap aligned to business growth and regulatory expectations. • Present clear, risk-based recommendations to executive leadership and the Board. • Translate strategy into measurable execution plans with defined milestones. • Drive remediation of audit, regulatory, and penetration testing findings. • Ensure strong incident response, vulnerability management, and change management and development programs. • Implement metrics that demonstrate real risk reduction and program effectiveness. • Lead and develop a high-performing Information Security team. • Provide clear direction, prioritization, and performance accountability across detection engineering, vulnerability management, application security, and security architecture functions. • Oversee operation and optimization of core security tooling, budget, and contract renewal management, including SIEM/XDR platforms (e.g., Wazuh), vulnerability management (e.g., Tenable), application security testing (e.g., Veracode), and related monitoring and detection systems. • Ensure security diagrams, architecture artifacts, and workflow documentation accurately reflect implemented controls and are audit-ready. • Establish measurable performance objectives and operational KPIs for the security team in collaboration with teams responsible for execution (MTTR, vulnerability remediation SLAs, detection coverage, control validation, etc.). • Drive automation and continuous improvement across monitoring, alert triage, vulnerability remediation, and DevSecOps integration. • Build a culture of ownership, urgency, and technical depth cross-functionally associated with the program. • Maintain sufficient hands-on familiarity with security tooling and architecture to effectively challenge assumptions, validate control effectiveness, and provide technical direction when needed. • Assist in the management of Nymbus’ risk log with the ability to identify, manage, and make security risk recommendations. • Develop a deep understanding of our platform, cloud architecture (AWS/GCP), integrations, and AI initiatives. • Partner with the CTO, engineering, product, NOC, and operations leaders. • Ensure strong embedded security controls into SDLC, DevOps, and cloud-native development practices. • Enable secure innovation rather than slow it down. • Serve as the subject matter expert in banking security and regulatory expectations. • Lead SOC/PCI audit readiness and regulatory exam preparedness. • Engage confidently with regulators, auditors, and bank and credit union clients and prospects. • Establish governance frameworks for secure and responsible AI usage. • Assess model risk, data protection, and security implications of AI-driven products. • Stay ahead of evolving regulatory expectations in AI and fintech.

• Play a pivotal role within Amgen’s Global Security (GS) organization. • Support patient safety efforts through the development and execution of strategies to counteract emerging external threats and prevent the distribution of illicit versions of Amgen products. • Lead response and remediation efforts for product security incidents such as counterfeiting, diversion, and illicit generics. • Collaborate across a diverse and complex network of internal stakeholders to maintain an effective and agile Product Security program. • Develop internal policies, procedures and standards in collaboration with other key stakeholders. • Identify effective security technologies intelligence gathering and assessment as well as partnering with industry and governmental agencies to enhance overall security and safety of products. • Ensure the protection of Amgen’s global product portfolio against counterfeiting, diversion, and illicit marketing of Amgen products. • Support a cross-functional steering committee that includes leadership from Global Security, Operations, Supply Chain, LAW, and Corporate Audit. • Define and operationalize strategies for threat monitoring, incident reporting and response, counterfeiting deterrence and authentication, and enforcement protocols. • Design, implement, and manage effective illicit trade and brand protection systems, processes, and tools. • Collaborate with the GS Intel Team to monitor both virtual and physical markets for suspicious activities involving Amgen products. • Develop and execute robust online monitoring and enforcement strategies across marketplaces, social media, and websites. • Investigate suspected or confirmed illicit activities affecting Amgen products, working internally or with law enforcement, health authorities, and industry officials as needed. • Implement strategies to promote ongoing education and awareness of product security issues, targeting both internal and external audiences. • Participate actively in industry, government, and other relevant groups, task forces, and committees to advocate for Amgen’s interests. • Facilitate security audits of vendors, suppliers, and business partners for-cause or pre-contract. • Manage activities associated with the security audit program along with other key internal stakeholders. • Identify, assess, and implement mitigation strategies to counter external threats to Amgen APIs, materials, finished products, and returns. • Establish and maintain relationships with local, state, and federal law enforcement and emergency services for effective communication and response. • Conduct and manage external investigations as necessary. • Manage vendor relationships to support Product Security strategy.