Join Coinbase as an Insider Threat Analyst to protect digital assets and customer trust through insider threat detection and investigations.
Skills & Technologies
AI in the day-to-day
Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs.
Requirements
- Experience
- 3+ years
Benefits
Joblaze summary
In the role of Insider Threat Analyst at Coinbase, the individual will focus on detecting and mitigating internal security threats by triaging alerts and conducting thorough investigations. Key skills include experience with insider threat technologies such as SIEM and UBA, along with the ability to translate complex findings into actionable recommendations. This position is ideal for candidates with over three years of relevant experience in security operations or investigations, particularly those comfortable in a fast-paced tech environment. Coinbase emphasizes a collaborative approach, partnering with various teams to enhance security measures as the company scales.
Joblaze insights
- Listed today on Joblaze — tracked directly from Coinbase's career page.
- Coinbase has 53 other open roles including Senior Manager, Finance & Strategy, Senior Staff Software Engineer, Payments , Software Engineer, Backend (Consumer - Risk).
- 60 active SIEM roles on Joblaze right now.
- 17 active DLP roles on Joblaze right now.
- 7 active Fraud Detection roles on Joblaze right now.
- Salary band is below the typical range for Security roles (median ~$168,000).
Quick facts
- Is the Insider Threat Analyst role remote?
- It's hybrid — Coinbase expects some on-site time in Remote - USA.
- What's the salary range?
- Coinbase lists $135,320–$159,200 for this role.
- How much experience is required?
- At least 3 years of relevant experience for this Insider Threat Analyst role.
- Where is the role based?
- Coinbase is hiring for this position in Remote - USA.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: Fraud Detection, SIEM, DLP, endpoint detection, UBA, Investigations.
- What seniority level is this role?
- Coinbase targets mid-level candidates for this position.
- Is this full-time or contract?
- Full-time for this Insider Threat Analyst role at Coinbase.
From the original posting
Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
You'll join the Insider Threat team within Coinbase's Security Operations organization as an Insider Threat Analyst. This team protects billions of dollars in digital assets and the trust of millions of customers by detecting, investigating, and mitigating threats from inside the organization. You'll serve as the front line for insider threat detection, triaging alerts, conducting investigations, and partnering cross-functionally with Security, Legal, HR, and business teams to safeguard Coinbase as it scales globally.
What you’ll be doing (ie. job duties):
- Execute alert triage, correlation, and analysis across insider threat detection systems (SIEM, UBA, DLP, endpoint detection), prioritizing findings and escalating recommendations for investigation and mitigation.
- Support investigations end to end, from initial triage and evidence collection through employee interviews and stakeholder coordination, delivering clear documentation of findings, risk assessment, and recommended next steps.
- Partner with Security, Legal, HR, and business teams to design and execute processes that identify and mitigate insider risks, including abuse and misuse across company systems.
- Build case documentation and investigative reports that translate complex technical findings into concise, decision-ready briefs and assessments for leadership and cross-functional stakeholders.
- Drive improvements to insider threat detection by identifying recurring control gaps, refining alerting logic, and recommending scalable solutions that reduce insider risk across the organization.
What we look for in you (ie. job requirements):
- 3+ years of experience in insider threat, security operations, investigations, fraud detection, or a closely related discipline, with hands-on use of insider threat technologies (SIEM, UBA, DLP, endpoint detection) and log analysis.
- Demonstrated experience conducting or supporting investigations involving sensitive employee matters, including evidence collection, interviewing techniques, and stakeholder coordination.
- Proven ability to translate complex security problems into clear, actionable recommendations, including composing investigative briefs and assessments consumed by leadership.
- Working knowledge of the insider threat landscape, including legal, regulatory, and ethical considerations of handling sensitive information, and experience with customer service tools or financial analysis.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Nice to haves:
- CISSP, or other security credentials
- You love analyzing data and identifying disparities and trends
- You’ve got experience in one or more of the following areas: incident response, data protection, risk management, counterintelligence, investigations, fraud detection, financial crimes investigation, intellectual property theft, access and identity management, or IT engineering
- You are comfortable with a fast-paced tech environment and learn quickly
- You’re familiar with blockchains, cryptocurrency, and onchain projects (or at least a good story about how you thought about investing in Bitcoin in 2014 but decided not to).
Position ID: P77055
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
Please be advised that each candidate may submit a maximum of four applications within any 30-day period. We encourage you to carefully evaluate how your skills and interests align with Coinbase's roles before applying.
Commitment to Equal Opportunity
Coinbase is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sex, gender expression or identity, sexual orientation or any other basis protected by applicable law. Coinbase will also consider for employment qualified applicants with criminal histories in a manner consistent with applicable federal, state and local law. For US applicants, you may view the Employee Rights and the Know Your Rights notices by clicking on their corresponding links. Additionally, Coinbase participates in the E-Verify program in certain locations, as required by law.
Coinbase is also committed to providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please contact us at accommodations[at]coinbase.com to let us know the nature of your request and your contact information. For quick access to screen reading technology compatible with this site click here to download a free compatible screen reader (free step by step tutorial can be found here).
Global Data Privacy Notice for Job Candidates and Applicants
Depending on your location, the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) may regulate the way we manage the data of job applicants. Our full notice outlining how data will be processed as part of the application procedure for applicable locations is available here. By submitting your application, you are agreeing to our use and processing of your data as required. For US applicants only, by submitting your application you are agreeing to arbitration of disputes as outlined here.
AI Disclosure
For select roles, Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. A human recruiter will review your interview responses, provided in the form of a voice recording and/or transcript, to assess them against the qualifications and characteristics outlined in the job description.
For select roles, Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate.
The above pilots are for testing purposes and Coinbase will not use AI to make decisions impacting employment. To request a reasonable accommodation due to disability, please contact accommodations[at]coinbase.com