Senior Insider Threat Analyst
WFA Digital Insight
As demand for cybersecurity specialists grew 27% in 2025, companies like Coinbase are seeking experts to protect their digital assets. With billions of dollars at stake, insider threat analysts are in high demand. Coinbase stands out for its remote-first approach and intense in-person working sessions, known as 'surges.' Before applying, candidates should know that a strong background in security investigations and insider threat technologies is essential. With the rise of remote work, companies are looking for candidates who can work independently and collaboratively to mitigate threats.
Job Description
About the Role
The Senior Insider Threat Analyst role at Coinbase is a critical position that requires a unique blend of technical expertise, investigative skills, and strategic thinking. As a member of the Insider Threat team within Coinbase's Security Operations organization, you will be responsible for detecting, investigating, and mitigating threats from inside the organization. Your work will involve collaborating with cross-functional teams, including Security, Legal, HR, and business teams, to design, implement, and refine processes that reduce insider risk and close recurring control gaps.The Insider Threat team uses a range of tools, including SIEM, UBA, DLP, and endpoint detection, to identify and respond to potential threats. As a Senior Insider Threat Analyst, you will be expected to own complex investigations from end to end, delivering clear findings, risk assessments, and actionable recommendations to leadership.
Coinbase is a remote-first company, but not remote-only. You can expect to get together quarterly for intense in-person working sessions, known as 'surges.' This approach allows for a unique blend of independent work and collaborative teamwork, and requires candidates who are self-motivated and able to work effectively in a remote environment.
What You Will Do
- Own complex insider threat investigations from triage and evidence collection through employee interviews and stakeholder coordination
- Lead detection and analysis efforts by prioritizing alert reviews across insider threat technologies
- Partner with Security, Legal, HR, and business teams to design, implement, and refine processes that reduce insider risk
- Shape the team's investigative and analytical capabilities by refining alerting logic and developing scalable detection improvements
- Mentor junior analysts on tradecraft, evidence handling, and stakeholder communication
- Strengthen reporting and stakeholder communication by composing decision-ready briefs and assessments for senior leadership
- Identify systemic control gaps and drive scaled improvements to insider threat detection and response processes
- Develop and maintain a deep understanding of the legal, regulatory, and ethical frameworks governing insider threat programs
- Collaborate with cross-functional teams to develop and implement insider threat mitigation strategies
What We Are Looking For
- 5+ years of experience in insider threat, security investigations, counterintelligence, or a closely related discipline
- Deep hands-on expertise in insider threat technologies, including SIEM, UBA, DLP, and endpoint detection
- Track record of independently leading complex, sensitive investigations involving employee matters
- Demonstrated ability to identify systemic control gaps and drive scaled improvements to insider threat detection and response processes
- Proven experience composing investigative briefs, risk assessments, and analytical products for senior leadership
- Working knowledge of the legal, regulatory, and ethical frameworks governing insider threat programs
- Utilizes generative AI responsibly, maintaining human oversight to deliver business-ready outputs
Nice to Have
- Experience with cloud-based security platforms and technologies
- Certification in a related field, such as CISSP or CEH
- Experience with data analysis and visualization tools, such as Tableau or Power BI
Benefits and Perks
- Competitive salary and equity package
- Comprehensive health, dental, and vision insurance
- Generous PTO and holiday policy
- Remote work stipend and equipment budget
- Opportunities for professional growth and development
- Access to a range of mental health and wellness resources
- Quarterly in-person working sessions, known as 'surges'
How to Stand Out
- Tip: Make sure you have a strong understanding of insider threat technologies, including SIEM, UBA, and DLP, and be prepared to provide examples of how you have used these tools in previous roles.
- Tip: Highlight your experience with investigative techniques, such as evidence collection and employee interviews, and be prepared to walk the interviewer through your process.
- Tip: Show that you are up-to-date with the latest developments in cybersecurity and insider threat mitigation, and be prepared to discuss how you stay current in the field.
- Tip: Emphasize your ability to work independently and collaboratively, and provide examples of how you have worked with cross-functional teams in previous roles.
- Tip: Be prepared to discuss your experience with data analysis and visualization, and how you have used these skills to inform your investigative work.
- Tip: If you have experience with generative AI, be prepared to discuss how you have used it in previous roles, and how you ensure that you maintain human oversight and deliver business-ready outputs.
This is a remote position listed on WFA Digital, the platform for professionals who work from anywhere. Browse more remote jobs across all categories.