SecOps Expert

Fireblocks; United States; Remote; USD 110,000 - 160,000; Full time

Job summary

Fireblocks in New York is seeking a SecOps specialist to protect production infrastructure for a digital-asset platform. The role blends hands-on incident response, detection engineering, and security tool ownership in a fast-paced environment with on-call shifts.

You will investigate alerts, conduct malware analysis, develop runbooks, and tune SIEM queries while coordinating with stakeholders across the business. Some weekend and night shifts are required; NY remote options may apply.

Qualifications

• 3+ years in incident response or SOC, handling security incidents and incident reports.
• Experience with security tooling: SIEM, IDS/IPS, malware detection, DLP, IAM.
• Ability to develop runbooks for frequent or critical incident types.

Responsibilities

• Investigate alerts, perform triage, deep-dive analysis, and define remediation plans.
• Conduct host-based, artifact, and malware analysis for investigations and incident response.
• Coordinate investigation and response activities with business stakeholders and cross-functional groups.
• Develop incident analysis reports with findings, gaps, and improvement recommendations.
• Author and tune detection logic, sensors, SIEM queries and dashboards.
• Partner with security-solution owners to assess detectability and mitigation of relevant TTPs.

Skills

Incident response experience

Security operations

Analytical thinking

Stakeholder collaboration

Education

Bachelor's degree in CS/IT or related field

Tools

SIEM

Threat intelligence

Intrusion detection

Malware detection

DLP

IAM

Job description

Role overview

A global Security & Information team is hiring a SecOps specialist to protect production infrastructure supporting a digital-asset platform. The role combines hands‑on incident response, detection engineering, and security tool ownership in a fast‑paced environment handling multiple projects at once. Some weekend and night shifts are required as part of on‑call coverage.

Responsibilities

• Investigate alerts, perform triage, deep-dive analysis, and define actionable follow-ups and remediation plans.
• Conduct host-based, artifact, and malware analysis in support of security investigations and incident response.
• Coordinate investigation and response activities with business stakeholders and cross‑functional groups.
• Develop incident analysis and findings reports for management, including gap identification and improvement recommendations.
• Author and tune detection logic, sensors, and SIEM queries and dashboards to surface advanced adversary techniques.
• Partner with security‑solution owners to assess whether existing controls can detect or mitigate relevant TTPs.

Requirements

• 3+ years working in an Incident Response or Security Operations Center (in‑house or outsourced), creating and managing security incidents and incident reports.
• Demonstrated experience handling low‑to‑high‑risk cybersecurity events, alerts, monitoring, and stakeholder-driven remediation.
• Ability to develop runbooks for the most frequent or critical incident types.
• 3+ years hands‑on with security tools such as SIEM, threat intelligence, intrusion detection, malware detection, DLP, and IAM.
• Solid understanding of system and security controls on at least two operating systems (Windows, Linux/Unix; macOS a plus), including host‑based forensics and OS‑artifact analysis.
• Strong problem‑solving mindset, growth orientation, and collaborative communication skills.

Nice to have

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Familiarity with cloud services, Kubernetes, cloud‑environment architecture, and major providers (AWS, GCP, Azure).

Benefits and work setup

• Based in New York (HQ or approved NY remote), with required shifts covering some weekends and nights.