Insider Threat Analyst, Coinbase

• You are actively aware of the insider threat landscape, and understand the legal, regulatory, and ethical considerations of working with sensitive information and situations
• You are discreet, thoughtful, and seek to coordinate systemic, cross functional solutions to mitigate risk
• You are adept at translating complex problems into ‘byte-sized’, readily implemented (and preferably automated) solutions
• You have experience with Insider Threat technologies (such as Security Information Event Management - SIEM, User Behavioral Analytics - UBA, Data Loss Prevention - DLP) and an understanding of investigations and/or the intelligence cycle
• You have excellent verbal and written communication skills. Other team members ask for your input to communicate clearly and concisely and you are comfortable composing briefs and assessments consumed by leadership
• You are experienced in interviewing techniques and comfortable speaking with employees about their actions
• You prefer to play as a team and are equally comfortable as the ‘novice’ or the ‘expert’
• You know that people aren’t stupid, but everyone makes mistakes. Your high degree of empathy means that your coworkers trust you to help solve their security problems, because you never come across as judgmental or condescending
• You bring 4 or more years of combined experience in security/technology roles

Desirable

• Security is a primary competency at Coinbase, and the Security Operations team keeps a watchful eye over every aspect of it
• Every day, we go to battle against some of the most sophisticated attackers in the world to protect billions of dollars worth of digital assets and ensure that our customers and employees can enjoy a safe, trusted experience
• As Coinbase scales globally, our team is scaling along with it, using a blend of tooling, automation, and strategic team growth to ensure that we’re well-equipped to protect the next billion users of crypto
• You’ll be partnering cross-functionally throughout the company (Security, Legal, HR, and Business Teams) to design, implement, and execute processes to safeguard our customers and company from potential insider risks and threat actors
• You’ll serve as the ‘front line’ for detection efforts, prioritizing alert reviews, correlation, analysis, and recommendations for further investigation and mitigation efforts
• You’ll refine our alerting rules/tools to reduce noise and target the ‘right’ data, because no one wants to review alerts all day long
• You’ll identify internal vulnerabilities that could be exploited, and marshal the resources to solve at scale