Insider Threat Analyst

You'll join the Insider Threat team within Coinbase's Security Operations organization as an Insider Threat Analyst. This team protects billions of dollars in digital assets and the trust of millions of customers by detecting investigating and mitigating threats from inside the organization. You'll serve as the front line for insider threat detection triaging alerts conducting investigations and partnering cross-functionally with Security Legal HR and business teams to safeguard Coinbase as it scales globally.

What you'll do:

• Execute alert triage correlation and analysis across insider threat detection systems (SIEM UBA DLP endpoint detection) prioritizing findings and escalating recommendations for investigation and mitigation.
• Support investigations end to end from initial triage and evidence collection through employee interviews and stakeholder coordination delivering clear documentation of findings risk assessment and recommended next steps.
• Partner with Security Legal HR and business teams to design and execute processes that identify and mitigate insider risks including abuse and misuse across company systems.
• Build case documentation and investigative reports that translate complex technical findings into concise decision-ready briefs and assessments for leadership and cross-functional stakeholders.
• Drive improvements to insider threat detection by identifying recurring control gaps refining alerting logic and recommending scalable solutions that reduce insider risk across the organization.

Required Skills and Experience:

• 2+ years of experience in insider threat security operations investigations fraud detection or a closely related discipline with hands-on use of insider threat technologies (SIEM UBA DLP endpoint detection) and log analysis.
• Demonstrated experience conducting or supporting investigations involving sensitive employee matters including evidence collection interviewing techniques and stakeholder coordination.
• Proven ability to translate complex security problems into clear actionable recommendations including composing investigative briefs and assessments consumed by leadership.
• Working knowledge of the insider threat landscape including legal regulatory and ethical considerations of handling sensitive information and experience with customer service tools or financial analysis.
• Utilizes generative AI responsibly maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency cost and quality.

Position ID:  P77055

#LI-Remote

How does Coinbase ensure its pay and bonus plans are competitive?

What We Do

Crypto creates economic freedom by ensuring that people can participate fairly in the economy and Coinbase (NASDAQ: COIN) is on a mission to increase economic freedom for more than 1 billion people. We’re updating the century-old financial system by providing a trusted platform that makes it easy for people and institutions to engage with crypto assets including trading staking safekeeping spending and fast free global transfers. We also provide critical infrastructure for onchain activity and support builders who share our vision that onchain is the new online. And together with the crypto community we advocate for responsible rules to make the benefits of crypto available around the world.

Why Work With Us

We have the opportunity to accelerate the pace of innovation in the world by building an open financial system. Our vision is to create more economic freedom in the world to help people control their own wealth start companies have financial privacy and participate in the global economy. And to get us there we focus build and move as a team.

Gallery