Security Operations Team Lead

The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more.

Founded in 2018 and already valued at over $8 billion, Fireblocks is a SaaS platform that helps companies to create innovative products on the blockchain and manage day-to-day crypto operations. Fireblocks is trusted by some of the largest financial institutions, banks, globally recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more, to securely scale digital asset operations through the Fireblocks Network and MPC-based wallet infrastructure. We have offices in New York, London, Tel Aviv, and Singapore, and we are continuing to expand our teams to reach new customers globally.

The Security & Information team is looking for someone who is passionate about technology and has a roll-up-their-sleeves mentality to join our global team. You’ll play a crucial role in enhancing our security infrastructure, improving networking, ensuring scalability, and maintaining strong security as we continue to grow. If you want to be an industry leader, on a team experiencing hyper-growth, look no further!

What you’ll do

As a SecOps Team Lead, you’ll be responsible for securing and protecting our infrastructure, including orchestrating and administering various internal autonomous processes and workflows. You will partner with technology team to onboard accessible AI workflows, driving the transition from manual SOC operations to an autonomous, agentic model. You'll also provide security expertise and guidance to the team on various security-related matters and build and own solutions to quickly identify breach attempts, contain and eradicate threats, streamline our security incident response processes, continuously test our controls, and help the business make informed decisions based on threat intelligence.This is a fast-paced environment, where you’ll have the opportunity to manage multiple projects at once.

Responsibilities

• Lead & Mentor: Manage a team of SecOps analysts, providing technical guidance, career development, and performance management in a fast-paced environment.
• Act as the primary escalation point for high-priority security incidents, leading the triage, containment, and post-mortem processes for our production and cloud environments.
• Lead SecOps projects from inception to execution, ensuring effective implementation and ongoing maintenance.
• Coordinate investigation, containment, and other response activities with business stakeholders and groups.
• Perform hands-on forensic investigations, log reviews, cloud investigations, and root-cause analysis
• AI-Driven Operational Maturity: Proven track record in orchestrating autonomous workflows (e.g., automated phishing triage, AI-driven anomaly detection).
• Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.
• Drive SOC Enablement & Modernization: Partner closely with the technology team to streamline and democratize autonomous AI workflows, leading the team's transition from manual operations to an accessible, agentic SOC.

Minimum Requirements

• 5+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) creating, escalating, and managing security incidents and creating incident reports.
• Extensive experience and managing the lifecycle of security incidents in a global, 24/7 production environment.
• Collaborating with stakeholders to drive incident response and remediation.
• Security Automation & AI: Proven experience in integrating AI models and automated workflows into day-to-day SecOps operations to optimize threat analysis and operational response.
• 1+ years in a leadership role (Team Lead or acting lead,Tech lead]), with a passion for mentoring and developing talent.
• Proven expertise in attack and mitigation methods within AWS, GCP, or Azure environments
• Incident Response Prowess: Extensive experience in risk prioritization and managing the lifecycle of security incidents in a global production environment
• Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts.
• Problem solver, an in-depth thinker with a growth mindset.
• Excellent communication skills and ability to work collaboratively with other teams

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.