Ready to do the most impactful work of your career? At Coinbase, we are uncompromising on our mission to increase economic freedom. The bar is high, the environment is intense, and we like it that way. This isn't a place for complacency, it’s a place to be pushed past your perceived limits. If you're ready to build the future of finance alongside people who refuse to settle for "good enough," you belong here. Coinbase is a remote-first, but not remote-only company. Expect to get together quarterly for intense in-person working sessions called “surges.” learn more about working at Coinbase.
You'll join the Insider Threat team within Coinbase's Security Operations organization as a Senior Insider Threat Analyst, helping protect billions of dollars in digital assets and the trust of millions of customers. This team detects, investigates, and mitigates threats from inside the organization using a blend of tooling, automation, and strategic expertise. You'll own complex investigations end to end, shape detection and response processes, and partner cross-functionally with Security, Legal, HR, and business teams to mature Coinbase's insider threat program as it scales globally.
What you'll do:
- Own complex insider threat investigations end to end, from triage and evidence collection through employee interviews and stakeholder coordination, delivering clear findings, risk assessments, and actionable recommendations to leadership.
- Lead detection and analysis efforts by prioritizing alert reviews across insider threat technologies (SIEM, UBA, DLP, endpoint detection), correlating signals, and identifying patterns that inform broader mitigation strategies.
- Partner cross-functionally with Security, Legal, HR, and business teams to design, implement, and refine processes that systematically reduce insider risk and close recurring control gaps at scale.
- Shape the team's investigative and analytical capabilities by refining alerting logic, developing scalable detection improvements, and mentoring junior analysts on tradecraft, evidence handling, and stakeholder communication.
- Strengthen reporting and stakeholder communication by composing decision-ready briefs and assessments for senior leadership, translating complex investigative findings into concise narratives with clear risk context and recommended next steps.
Required Skills and Experience:
- 5+ years of experience in insider threat, security investigations, counterintelligence, fraud detection, or a closely related discipline, with deep hands-on expertise in insider threat technologies (SIEM, UBA, DLP, endpoint detection) and log analysis.
- Track record of independently leading complex, sensitive investigations involving employee matters, including evidence collection, interviewing techniques, and coordination across Legal, HR, and business stakeholders.
- Demonstrated ability to identify systemic control gaps and drive scaled improvements to insider threat detection and response processes, including refining alerting logic and recommending automation opportunities.
- Proven experience composing investigative briefs, risk assessments, and analytical products consumed by senior leadership, with the ability to translate complex technical and behavioral findings into concise, decision-ready narratives.
- Working knowledge of the legal, regulatory, and ethical frameworks governing insider threat programs, with experience applying sound judgment when handling highly sensitive and confidential information.
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs and drive measurable improvements in workflow efficiency, cost, and quality.
Position ID: P77056
#LI-Remote
Pay Transparency Notice: Base salary varies by location (see range below). Total compensation may also include equity and bonus eligibility, and benefits (medical, dental, vision, 401(k)).
- Application Limit: Candidates may submit a maximum of 3 applications within a 6-month period.
- Equal Opportunity Employer: Coinbase is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or genetic information. Applicants with criminal histories will be considered consistent with applicable federal, state, and local laws.
- US Applicants: View Employee Rights, Know Your Rights, and E-Verify Notice of Participation.
- Accommodations: If you are an individual with a disability who needs a reasonable accommodation, email us your request and contact info at accommodations[at]coinbase.com. Need screen reading technology? Click here to download a free compatible screen reader and view the tutorial.
- Data Privacy & Arbitration: By submitting your application, you agree to our Candidate Privacy Notice. US applicants: By submitting your application, you agree to Arbitration of Disputes.
- AI Disclosure: Coinbase is piloting an AI tool based on machine learning technologies to conduct initial screening interviews to qualified applicants. The tool simulates realistic interview scenarios and engages in dynamic conversation. Coinbase is also piloting an AI interview intelligence platform to transcribe and summarize interview notes, allowing our interviewers to fully focus on you as the candidate. Coinbase will not use AI to make decisions impacting employment.
Skills Required
- 5+ years experience in insider threat, security investigations, counterintelligence, fraud detection, or closely related discipline
- Deep hands-on expertise with insider threat technologies (SIEM, UBA, DLP, endpoint detection) and log analysis
- Proven track record independently leading complex, sensitive investigations including evidence collection and employee interviews
- Experience coordinating investigations with Legal, HR, and business stakeholders
- Ability to identify systemic control gaps and drive scaled detection and response improvements, including refining alert logic and recommending automation
- Experience composing investigative briefs, risk assessments, and concise analytical products for senior leadership
- Working knowledge of legal, regulatory, and ethical frameworks governing insider threat programs and handling sensitive information
- Responsible use of generative AI with human oversight to produce business-ready outputs and workflow improvements
- Mentoring or training junior analysts on investigative tradecraft and evidence handling
What the Team is Saying
_0.png)
_0.png)
Coinbase Compensation & Benefits Highlights
How does Coinbase ensure its pay and bonus plans are competitive?
Coinbase uses a market-driven, pay-for-performance approach to keep pay and bonus plans competitive. Coinbase regularly benchmarks roles against leading technology and fintech companies using external market data and reviews its compensation programs on a recurring basis to ensure salary, bonus, and equity remain aligned with the broader market and business goals. Annual bonus and equity programs are tied to both company results and individual impact, so when Coinbase and its people perform, total rewards reflect that performance.
Coinbase Insights
What We Do
Crypto creates economic freedom by ensuring that people can participate fairly in the economy, and Coinbase (NASDAQ: COIN) is on a mission to increase economic freedom for more than 1 billion people. We’re updating the century-old financial system by providing a trusted platform that makes it easy for people and institutions to engage with crypto assets, including trading, staking, safekeeping, spending, and fast, free global transfers. We also provide critical infrastructure for onchain activity and support builders who share our vision that onchain is the new online. And together with the crypto community, we advocate for responsible rules to make the benefits of crypto available around the world.
Why Work With Us
We have the opportunity to accelerate the pace of innovation in the world by building an open financial system. Our vision is to create more economic freedom in the world, to help people control their own wealth, start companies, have financial privacy, and participate in the global economy. And to get us there, we focus, build and move as a team.
Gallery
Coinbase Teams
Coinbase Offices
Remote Workspace
Employees work remotely.
Coinbase is remote-first, which enables us to innovate, build and move quickly. Our teams are able to work effectively from around the globe with time for in-person offsites and team meetups to enhance collaboration and connection.
.png)
