Security Operations Specialist

Fireblocks; New York (NY); On-site; USD 110,000 - 180,000; Full time

Benefits offered by this job

Flexible vacation policy

Job summary

Fireblocks in New York seeks a SecOps Specialist to secure and protect our infrastructure, owning security incident response processes and threat intelligence-driven decisions.

You will investigate alerts, triage, and develop remediation plans while collaborating with cross‑functional teams. Strong OS forensics experience and extensive SIEM use are expected.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• 3+ years of incident response or SOC experience with security incidents.
• Experience with host-based forensics and OS artifact analysis.

Responsibilities

• Investigate alerts, triage, deep dive and remediation plans.
• Coordinate investigation, containment, and response activities with stakeholders.
• Develop incident analysis reports for management including gap identifications and recommendations.
• Recommend or develop new detection logic and tune sensors/security controls.
• Create custom SIEM queries and dashboards to monitor advanced TTPs.

Skills

Incident response

SOC experience

Analytical thinking

Collaboration

Communication

Education

Bachelor's degree in Computer Science / IT / related field

Tools

SIEM

Analytics & Intelligence

Intrusion Detection

Malware detection

Data Loss Prevention

Identity & Access Management

Job description

• As a SecOps Specialist, you’ll be responsible for securing and protecting our infrastructure, including managing and administering various security-related technologies, platforms, and tools
• You’ll also provide security expertise and guidance to the team on various security-related matters
• You’ll build and own solutions to quickly identify breach attempts, contain and eradicate threats, streamline our security incident response processes, continuously test our controls, and help the business make informed decisions based on threat intelligence
• This is a fast-paced environment, where you’ll have the opportunity to manage multiple projects at once
• Investigate alerts, triage, deep dive and come up with proper action items and remediation plans
• Perform host-based analysis, artifact analysis, and malware analysis in support of security investigations and incident response
• Coordinate investigation, containment, and other response activities with business stakeholders and groups
• Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement
• Recommend or develop new detection logic and tune existing sensors/security controls
• Work with security solutions owners to assess existing security solutions ability to detect/mitigate the above mentioned TTPs
• Creating custom SIEM queries and dashboards to support the monitoring and detection of advanced TTPs against the company network

Benefits

• Flexible vacation policy

Managing low to high-risk cybersecurity events, alerts, and incidents, event monitoring, and analysis, and responding to and escalating IT/DevOps security events and threats and vulnerabilitiesSolid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts3+ years of working with security tools such as SIEM, Analytics & Intelligence, Intrusion Detection, Malware detection, Data Loss Protection, and Identity & Access ManagementDevelopment of common runbooks for most frequent or critical incident typesExcellent communication skills and ability to work collaboratively with other teamsProblem solver, an in-depth thinker with a growth mindset3+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) creating, escalating, and managing security incidents and creating incident reportsCollaborating with stakeholders to drive incident response and remediationBachelor’s degree in Computer Science, Information Technology, or related fieldFamiliarity with cloud services, Kubernetes, cloud environment architecture, and the major cloud providers (AWS, GCP, Azure)