Security Operations Team Lead

Fireblocks is the company bringing global finance onchain. Backed by over $1 billion in capital, we are the premier digital asset infrastructure provider trusted by thousands of industry-defining financial institutions, including banks, payment providers, fintechs, and global corporates such as BNY Mellon, BNP Paribas, ANZ Bank, Western Union, Stripe, and Revolut. Built for institutional scale and security, our enterprise-grade platform and network have powered over $14 trillion in digital asset transfers worldwide.

Founded in 2018 and already valued at over $8 billion, Fireblocks is a SaaS platform that helps companies to create innovative products on the blockchain and manage day-to-day crypto operations. Fireblocks is trusted by some of the largest financial institutions, banks, globally recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more, to securely scale digital asset operations through the Fireblocks Network and MPC-based wallet infrastructure. We have offices in New York, London, Tel Aviv, and Singapore, and we are continuing to expand our teams to reach new customers globally.

The Security & Information team is looking for someone who is passionate about technology and has a roll-up-their-sleeves mentality to join our global team. You’ll play a crucial role in enhancing our security infrastructure, improving networking, ensuring scalability, and maintaining strong security as we continue to grow. If you want to be an industry leader, on a team experiencing hyper-growth, look no further!

What you’ll do

As a SecOps Team Lead , you’ll be responsible for securing and protecting our infrastructure, including orchestrating and administering various internal autonomous processes and workflows. You will partner with technology team to onboard accessible AI workflows, driving the transition from manual SOC operations to an autonomous, agentic model. You'll also provide security expertise and guidance to the team on various security-related matters and build and own solutions to quickly identify breach attempts, contain and eradicate threats, streamline our security incident response processes, continuously test our controls, and help the business make informed decisions based on threat intelligence. This is a fast-paced environment, where you’ll have the opportunity to manage multiple projects at once.

Responsibilities

Lead & Mentor: Manage a team of SecOps analysts, providing technical guidance, career development, and performance management in a fast-paced environment.

Act as the primary escalation point for high-priority security incidents, leading the triage, containment, and post-mortem processes for our production and cloud environments.

Lead SecOps projects from inception to execution, ensuring effective implementation and ongoing maintenance.

Coordinate investigation, containment, and other response activities with business stakeholders and groups.

Perform hands-on forensic investigations, log reviews, cloud investigations, and root-cause analysis

AI-Driven Operational Maturity: Proven track record in orchestrating autonomous workflows (e.g., automated phishing triage, AI-driven anomaly detection).

Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.

Drive SOC Enablement & Modernization: Partner closely with the technology team to streamline and democratize autonomous AI workflows, leading the team's transition from manual operations to an accessible, agentic SOC.

Minimum Requirements

5+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) creating, escalating, and managing security incidents and creating incident reports.

Extensive experience and managing the lifecycle of security incidents in a global, 24/7 production environment.

Collaborating with stakeholders to drive incident response and remediation.

Security Automation & AI: Proven experience in integrating AI models and automated workflows into day-to-day SecOps operations to optimize threat analysis and operational response.

1+ years in a leadership role (Team Lead or acting lead,Tech lead]), with a passion for mentoring and developing talent.

Proven expertise in attack and mitigation methods within AWS, GCP, or Azure environments

Incident Response Prowess: Extensive experience in risk prioritization and managing the lifecycle of security incidents in a global production environment

Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts.

Problem solver, an in-depth thinker with a growth mindset.

Excellent communication skills and ability to work collaboratively with other teams

Preferred Qualifications

Bachelor's degree in Computer Science, Information Technology, or related field.

Fireblocks' mission is to enable every business to easily and securely access digital assets and cryptocurrencies. In order to do that, we strongly believe our workforce should be as diverse as our clients, and this is why we embrace diversity and inclusion in all its forms.

Please see our candidate privacy policy here .