Senior SecOps Expert

About the role

Fireblocks is seeking a Senior SecOps Expert to join its global Security & Information team. You will be the primary escalation point for critical security alerts, lead SecOps projects, and mentor a team of experts while helping to scale the company’s security infrastructure.

Key responsibilities

• Operate as the primary escalation point for critical security alerts, conducting deep‑dive DFIR investigations and threat hunting.
• Lead SecOps projects from inception through execution, ensuring effective implementation and ongoing maintenance.
• Mentor a team of SecOps experts, providing technical guidance in a fast‑paced environment.
• Research and leverage security telemetry and existing solutions to improve triage and automated response.
• Coordinate investigation, containment, and response activities with business stakeholders.
• Perform hands‑on forensic investigations, log reviews, cloud investigations, and root‑cause analysis.
• Develop incident analysis reports for management, identifying gaps and recommending improvements.

Required profile

• 5+ years experience in Incident Response or Cyber Security Operations Center, handling and reporting security incidents.
• Extensive experience managing the lifecycle of security incidents in a global 24/7 production environment.
• Proven ability to collaborate with cross‑organizational stakeholders to drive incident response and remediation.
• Experience developing common runbooks for frequent or critical incident types.
• Strong development fundamentals with production‑grade code delivery.
• Hands‑on programming experience (Python, Bash) and ability to build automation processes.
• Expertise in attack and mitigation methods within Cloud and SaaS environments.
• Solid understanding of system and security controls on at least two OSs (Windows, Linux/Unix, macOS) and host‑based forensics.
• Problem‑solver with a growth mindset and excellent communication skills.

Required skills

• Python programming
• Bash scripting
• Automation of security processes
• Cloud security
• SaaS security
• Windows operating system security
• Linux/Unix operating system security
• macOS operating system security
• Host‑based forensics
• OS artifact analysis