Senior Detection Engineer, Insider Threat

📌 Role: Senior Detection Engineer, Insider Threat

📍 Location: United States (Remote)

💼 Type: Full-time

💰 Salary Range: $180,370 – $212,200 USD + bonus, equity, benefits

🚀 Role Overview:

Join Coinbase’s Security Operations team to help protect billions in digital assets by building and implementing insider threat detection, prevention, and security controls. You will develop and maintain security tooling, work cross-functionally to advise on technical impacts, and help investigate security incidents involving insider risks.

🛠️ Key Responsibilities:

• Build and implement insider threat detection and prevention tools (SIEM, UBA, DLP).
• Develop security automations and custom alerts using log data and SOAR platforms.
• Collaborate with Security, Infrastructure, IT, and Legal to evaluate security impacts and build controls.
• Aggregate and correlate data for threat detection via query writing and data manipulation.
• Assist investigations by creating custom tools and extending detection capabilities.
• Communicate findings clearly in briefs and assessments for leadership and training purposes.

✅ Requirements:

• 5-10+ years combined experience in security, technology, or analytic roles.
• Experience with Insider Threat technologies like SIEM, UBA, and DLP.
• Skilled in SQL, Python, and log manipulation to engineer custom detections and automations.
• Comfortable working cross-functionally to implement technical controls.
• Knowledgeable about insider threat landscapes and legal/regulatory considerations.
• Strong communication skills with ability to clearly convey complex issues.
• High empathy, discretion, and teamwork mindset; trusted by coworkers.
• Able to translate complex security problems into actionable, preferably automated solutions.

🌟 Nice-to-Haves:

• Diverse or unconventional background in security.
• Familiarity with blockchain, cryptocurrency, and onchain projects.
• Experience in incident response, data protection, fraud detection, risk management, counterintelligence, or identity management.
• Passion for metrics and making intangible security issues tangible.