Senior Security Engineer, Insider Threat

Details

Ready to be pushed beyond what you think you’re capable of?

At Coinbase, our mission is to increase economic freedom in the world. It’s a massive, ambitious opportunity that demands the best of us, every day, as we build the emerging onchain platform — and with it, the future global financial system.

To achieve our mission, we’re seeking a very specific candidate who is passionate about crypto and blockchain technology, eager to leave their mark, and who relishes working with high-caliber colleagues. Our work culture is intense and not for everyone: while many roles at Coinbase are remote-first, we are not remote-only and in-person participation is required throughout the year for team and company-wide offsites.

The Security Operations team protects billions of dollars of digital assets and includes CSIRT, Trust & Safety, Threat Intelligence, and Insider Threat functions. As Coinbase scales globally, the Security Operations group scales with it using tooling, automation, and strategic growth.

Responsibilities

• Build and implement detections, preventions, security controls, and automations to deter insider threats and improve holistic security posture
• Test and maintain security tooling, particularly for endpoint detection and investigation
• Collaborate cross-functionally with Security, Infrastructure, IT, and Legal to obtain necessary technical information and advise on downstream impacts of builds/deployments
• Link disparate information so it can be aggregated, visualized, and interpreted for indications of threat (via query builds, table joins, etc.)
• Assist with investigations as needed (may involve rapidly building tools or extending capabilities to aid response efforts)

Requirements

• Experience designing and implementing Insider Threat technologies such as SIEM, UEBA, and DLP, and an understanding of investigations and/or the intelligence cycle
• Comfortable manipulating logs, tables, and data lakes to engineer custom detections and dashboards
• Mastery of SQL and coding languages like Python; regularly manipulate logs to create custom alerts and automations with SOAR
• Comfortable working cross-functionally with infrastructure, IT, and response teams to design and implement technical controls
• Active awareness of the insider threat landscape and understanding of legal, regulatory, and ethical considerations when working with sensitive information
• Discreet, thoughtful, and oriented toward systemic cross-functional solutions to mitigate risk
• Able to translate complex problems into readily implemented (and preferably automated) solutions
• Excellent verbal and written communication skills; comfortable composing briefs and assessments for leadership and training others
• Team-oriented and adaptable (comfortable as both novice and expert)
• Empathetic approach to colleagues and security problems
• 5–10 years or more of combined experience in security/technology or other analytic roles

Nice to haves

• Diverse or unconventional paths into security (unicorns welcome)
• Familiarity with blockchains, cryptocurrency, and onchain projects
• Experience crafting metrics that make the intangible tangible
• Experience in one or more of: incident response, data protection, risk management, counterintelligence, fraud detection, intellectual property theft, access and identity management, or IT engineering

Job #: P72585
#LI-Remote

Pay Transparency

The target annual salary for this position can range as detailed below. Full time offers from Coinbase also include target bonus + target equity + benefits (including medical, dental, and vision).

Pay Range: £122,400 — £136,000 GBP

Benefits

• Private Medical Insurance
• Dental insurance
• Vision / Eye Care Vouchers
• Life Assurance Benefit
• Disability / Income Protection
• Workplace Pension Scheme
• Travel Medical Policy - Global Traveler
• Employee Stock Purchase Plan (ESPP)
• Wellness Stipend
• Mobile / Internet Reimbursement
• Connections Stipend
• Learning and Development Allowance
• Employee Assistance Program
• Fertility Benefits
• Generous Time off / Leave Policy

Equal Opportunity & Privacy

Coinbase is an Equal Opportunity Employer and provides reasonable accommodations for candidates with disabilities. Depending on location, GDPR and CCPA may regulate applicant data processing. Coinbase may pilot AI tools for initial screening interviews for select roles; humans will review interview responses and Coinbase will not use AI to make employment decisions.