Security Operations Lead — Build & Scale AI SecOps

Fireworks AI; United States; On-site; USD 140,000 - 190,000; Full time

Job summary

Fireworks AI is hiring its first Security Operations Lead to build and run a modern SecOps function. You will own incident response end-to-end, stand up detection content, and drive playbooks while growing into a people leadership role as the team scales.

You’ll roll out CrowdStrike across endpoints and cloud, expand SOAR automation with Incident.io, and partner with IT and Security Engineering to improve detection, response, and resilience across our AI infrastructure as we scale globally.

Qualifications

• Strong detection engineering background with scalable content.
• Proven scripting/automation, especially Python and SOAR.
• Experience building or maturing a SecOps function, tooling, processes, metrics.
• 7+ years in security operations, detection, or incident response.
• Hands-on with EDR platforms (CrowdStrike preferred).
• Cloud security operations in AWS, GCP, or Azure; telemetry and response knowledge.
• Professional certifications such as GCIA, GCIH, GCFA, OSCP, or similar.

Responsibilities

• Lead the rollout and operation of CrowdStrike across endpoints and cloud environments.
• Define, implement, and measure the detection and response program against MITRE ATT&CK.
• Own end-to-end incident response: run incidents, post-incident reviews, and lessons learned.
• Develop and run security operations workflows, including SOAR with Incident.io, on-call and SLAs.
• Build threat intelligence into detections, hardening, and tabletop exercises.
• Partner with Infrastructure and Security Engineering to cover incidents and improve coverage.

Skills

Detection engineering

Python

SOAR automation

Incident response

Cloud security

EDR tooling

Security operations

Leadership

Tools

CrowdStrike

Incident.io

SIEM

Job description

Fireworks AI is hiring its first Security Operations Lead to build and run a modern SecOps function. You will own incident response end-to-end, stand up detection content, and drive playbooks while growing into a people leadership role as the team scales.

You’ll roll out CrowdStrike across endpoints and cloud, expand SOAR automation with Incident.io, and partner with IT and Security Engineering to improve detection, response, and resilience across our AI infrastructure as we scale globally.