Coinbase
Mid
Triage and investigate insider threats protecting Coinbase's billions in digital assets
This is Coinbase's Insider Threat Analyst role within Security Operations, covering alert triage across SIEM/UBA/DLP/endpoint detection tools, end-to-end investigations, and cross-functional coordination with Legal, HR, and business teams. With a 2+ year bar in insider threat or security operations, expect questions on investigative rigor, evidence handling, and translating technical findings into decision-ready briefs.
走进这场面试
免费 · 一场按这个岗位校准的真语音模拟
这场面试考什么
- Alert triage/correlation (SIEM, UBA, DLP, endpoint detection)
- End-to-end investigation and evidence handling
- Sensitive employee-matter investigations and coordination
- Investigative writing / decision-ready briefs
- Identifying control gaps and improving detection logic
- Responsible use of generative AI with human oversight
常见提问方向
Walk through how you triage and prioritize alerts across SIEM, UBA, DLP, and endpoint detection tools
Describe an investigation you led end-to-end, including evidence collection and any employee interviews
How do you coordinate with Legal and HR on a sensitive insider threat case
Give an example of a case where you identified a recurring control gap and proposed a scalable fix
How do you translate a complex technical finding into a brief a non-technical leader can act on
How do you use generative AI tools in your investigative work while maintaining human oversight
What ethical or legal considerations do you weigh when handling sensitive insider threat information
相关面试
Coinbase
Senior
Senior Software Engineer - Data Platform
Coinbase
Mid
Regional Threat Assessment Manager
Coinbase
Mid
Analytics Engineer, Compliance Data
Stripe
Mid
Security Engineer - Threat Detection
Robinhood
Mid
Security Engineer, Detection & Response
Robinhood
Mid