All interviews
Coinbase logo

Coinbase

Senior

Own end-to-end insider threat investigations at Coinbase, from alert triage to leadership-ready risk briefs

Coinbase is hiring a Senior Insider Threat Analyst for its Security Operations org to lead complex, sensitive investigations involving employees and to mature the insider threat program as the company scales globally. This interview probes hands-on investigative tradecraft (SIEM, UBA, DLP, endpoint detection), cross-functional judgment with Legal/HR, and the ability to turn messy signals into decision-ready narratives for senior leadership.

Step into this interview

Free · a live voice mock calibrated to this exact role

Practice this interview

What this interview tests

  • End-to-end investigation ownership (triage, evidence, interviews, findings)
  • Insider threat tooling: SIEM, UBA, DLP, endpoint detection, log correlation
  • Cross-functional coordination with Legal, HR, and business stakeholders
  • Detection/alerting logic improvement and systemic control-gap closure
  • Executive communication: risk assessments and decision-ready briefs
  • Legal, regulatory, and ethical judgment handling confidential information

Common question themes

Walk through a complex insider threat investigation you led end to end

How do you correlate signals across SIEM/UBA/DLP/endpoint tools to avoid false positives

Describe a time you had to interview an employee about a sensitive matter

How do you decide when and how to involve Legal and HR in an investigation

Tell me about a systemic control gap you identified and how you scaled the fix

How would you brief a senior leader on a high-risk, low-certainty finding

View the original posting

Related interviews