SecOps Specialist

Paradigm; Boston (MA); On-site; USD 100,000 - 140,000; Full time

Job summary

A leading company in digital assets is seeking a SecOps Expert to enhance their security infrastructure and manage incident responses. This role involves collaborating with technical teams, developing incident reports, and using advanced security tools. Ideal candidates will have significant experience in cybersecurity and a strong problem-solving mindset.

Qualifications

• 4+ years experience in Incident Response/Cyber Security Operations.
• 3+ years with security tools like SIEM, Intrusion Detection.
• Excellent communication and problem-solving skills.

Responsibilities

• Investigate alerts and develop remediation plans.
• Coordinate incident response activities with stakeholders.
• Create custom SIEM queries for advanced threat detection.

Skills

Incident Response

Cyber Security Operations

Communication

Problem Solving

Collaboration

Education

Bachelor's degree in Computer Science or Information Technology

Tools

SIEM

Intrusion Detection

Malware Detection

Data Loss Prevention

Identity & Access Management

Job description

The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and are trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more.

The Security & Information team is looking for someone who is passionate about technology and has a roll-up-their-sleeves mentality to join our global team. You’ll play a crucial role in enhancing our security infrastructure, improving networking, ensuring scalability, and maintaining strong security as we continue to grow. If you want to be an industry leader on a team experiencing hyper-growth, look no further!

What you’ll do

As a SecOps Expert, you’ll be responsible for securing and protecting our infrastructure, including managing and administering various security-related technologies, platforms, and tools. You'll also provide security expertise and guidance to the team on various security-related matters, including translating product usage data into actionable advice for security.

You’ll build and own solutions to quickly identify breach attempts, contain and eradicate threats, streamline our security incident response processes, continuously test our controls, and help the business make informed decisions based on threat intelligence.

You’ll collaborate with other business and technical teams during ongoing true positive incidents and participate in war room calls.

This is a fast-paced environment, where you’ll have the opportunity to manage multiple projects at once.

Responsibilities

• Investigate alerts, triage, deep dive, and come up with proper action items and remediation plans.
• Coordinate investigation, containment, and response activities with business stakeholders and groups.
• Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.
• Recommend or develop new detection logic and tune existing sensors/security controls.
• Work with security solutions owners to assess existing security solutions’ ability to detect/mitigate the mentioned TTPs.
• Create custom SIEM queries to support monitoring and detection of advanced TTPs against the company network.
• Translate product usage data into actionable advice for security.
• Provide business guidelines in a regular cadence with security and technical stakeholders, including Product, DevOps, Support, etc.

Minimum Requirements

• 4+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced), creating, escalating, and managing security incidents and incident reports.
• Managing low to high-risk cybersecurity events, alerts, and incidents, event monitoring, analysis, and response to IT/DevOps security threats and vulnerabilities.
• Collaborating with stakeholders to drive incident response and remediation.
• Development of common runbooks for frequent or critical incident types.
• 3+ years of experience with security tools such as SIEM, Analytics & Intelligence, Intrusion Detection, Malware detection, Data Loss Prevention, and Identity & Access Management.
• Solid understanding of system and security controls on at least two OSs (Windows, Linux/Unix, MacOS (Advantage)), including host-based forensics and OS artifact analysis.
• Problem solver, in-depth thinker with a growth mindset.
• Excellent communication skills (both oral and written) and ability to collaborate effectively with other teams.
• Experience in host-based analysis, artifact analysis, and malware analysis to support security investigations and incident response (Advantage).
• Understanding of cryptographic algorithms used by public blockchain networks and other cryptography topics (Advantage).

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Familiarity with cloud services, Kubernetes, cloud architecture, and major cloud providers (AWS, GCP, Azure).

Fireblocks' mission is to enable every business to easily and securely access digital assets and cryptocurrencies. We believe our workforce should reflect the diversity of our clients, and we embrace diversity and inclusion in all its forms.

Please see our candidate privacy policy here.