AI Infrastructure Security Operations Lead

Fireworks; San Mateo; On-site; PHP 1,800,000 - 3,200,000; Full time

Job summary

Fireworks is seeking a Security Operations Lead to build and run SecOps for its AI infrastructure platform. You will own incident response end-to-end, stand up detection content, and drive improvements across detection, response, and threat intel.

You’ll collaborate with Infrastructure and Security Engineering as the team scales, growing from IC to people leadership. You’ll lead rollout of CrowdStrike, operate MITRE-aligned detection, and implement SOAR workflows with Incident.io, while shaping

Qualifications

• 7+ years in security operations, detection and response, or related field.
• Hands-on experience with EDR platforms (CrowdStrike preferred).
• Scripting and automation skills (Python) applied to detection and response.
• Strong incident response leadership with triage, communications and post-incident reviews.
• Working knowledge of cloud security operations (AWS, GCP, Azure).
• Experience building or maturing a SecOps function, with tooling and metrics.
• Ability to operate in a build phase and balance process vs execution.

Responsibilities

• Lead rollout and tuning of CrowdStrike across endpoint and cloud environments; coordinate with IT and Security Engineering.
• Define and operate detection and response program; build content and triage workflows; measure coverage against MITRE ATT&CK.
• Own end-to-end incident response; operationalize SIRP, run incidents, lead post-incident reviews.
• Stand up security operations workflow with SOAR and Incident.io; define triage of IT-ticketing cases and SLAs.
• Build and operationalize threat intelligence capabilities; translate intel into detections and hardening.
• Partner with Infrastructure and cross-functional teams to support incidents and initiatives.

Skills

Security operations

Incident response

Python

SOAR automation

Cloud security

Threat intel

Detection engineering

Tools

CrowdStrike

Job description

Fireworks is seeking a Security Operations Lead to build and run SecOps for its AI infrastructure platform. You will own incident response end-to-end, stand up detection content, and drive improvements across detection, response, and threat intel.

You’ll collaborate with Infrastructure and Security Engineering as the team scales, growing from IC to people leadership. You’ll lead rollout of CrowdStrike, operate MITRE-aligned detection, and implement SOAR workflows with Incident.io, while shaping