About the position
The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more. Join our Security & Information team and bring your passion for technology and hands-on problem-solving to our global, fast-growing organization! As a SecOps Expert, you’ll be at the forefront of enhancing our security infrastructure, driving scalability, and keeping our systems strong as we grow. In this role, you’ll secure and protect our infrastructure by managing cutting-edge security tools, providing expert guidance, and turning product usage data into actionable security strategies. You’ll build innovative solutions to detect and neutralize threats, streamline incident response, test controls, and use threat intelligence to drive smart business decisions. You’ll collaborate across teams, handle real-time incidents, and thrive in a fast-paced environment where every day brings new challenges and opportunities to make an impact. If you’re ready to lead in an industry experiencing hyper-growth, this is the role for you!
Responsibilities
- Investigate alerts, triage, deep dive, and come up with proper action items and remediation plans.
- Coordinate investigation, containment, and other response activities with business stakeholders and groups.
- Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.
- Recommend or develop new detection logic and tune existing sensors/security controls.
- Work with security solutions owners to assess existing security solution's ability to detect/mitigate the abovementioned TTPs.
- Creating custom SIEM queries to support the monitoring and detection of advanced TTPs against the company network.
- Translating product usage data into actionable advice for security.
- Provide business guidelines in a regular cadence with Security and technical Stakeholders in collaboration with the Account Team, including Product, DevOps, Support, etc.
Requirements
- 5+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced), creating, escalating, and managing security incidents and creating incident reports.
- Managing low to high-risk cybersecurity events, alerts, and incidents, event monitoring and analysis, and responding to and escalating IT/DevOps security events and threats and vulnerabilities.
- Collaborating with stakeholders to drive incident response and remediation.
- Development of common runbooks for most frequent or critical incident types.
- 3+ years of working with security tools such as SIEM, Analytics & Intelligence, Intrusion Detection, Malware detection, Data Loss Protection, and Identity & Access Management.
- Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts.
- Problem solver, an in-depth thinker with a growth mindset.
- Excellent communication skills (both verbal and written) and ability to work collaboratively with other teams.
- Perform host-based analysis, artifact analysis, and malware analysis in support of security investigations and incident response (Advantage).
- Understanding of cryptographic algorithms utilized by public blockchain networks and other cryptography-related topics. (Advantage).
Nice-to-haves
- Bachelor's degree in Computer Science, Information Technology, or related field.
- Familiarity with cloud services, Kubernetes, cloud environment architecture, and the major cloud providers (AWS, GCP, Azure).
Benefits
- A reasonable base salary range estimate for this position is $148,000 - $185,000.
- The base salary is one component of the total compensation package, which for some roles may include a target bonus, a very competitive equity grant, and very generous benefits.
