Security Operations Team Lead

About the role

Fireblocks is seeking a Security Operations Team Lead to protect and secure its global infrastructure. You will lead the SecOps team, drive automation with AI, and transition the SOC from manual processes to an autonomous model.

Key responsibilities

• Lead and mentor a team of SecOps analysts, providing technical guidance, career development, and performance management.
• Act as the primary escalation point for high‑priority security incidents, overseeing triage, containment, and post‑mortem activities across production and cloud environments.
• Lead SecOps projects from inception through execution, ensuring effective implementation and ongoing maintenance.
• Coordinate investigation, containment, and response activities with business stakeholders and other groups.
• Perform hands‑on forensic investigations, log reviews, cloud investigations, and root‑cause analysis.
• Develop and integrate AI‑driven autonomous workflows, such as automated phishing triage and anomaly detection, to modernize the SOC.

Required profile

• 5+ years of experience in Incident Response or a Cyber Security Operations Center, managing security incidents in a global 24/7 production environment.
• 1+ years in a leadership role (team lead or technical lead) with a passion for mentoring talent.
• Strong communication skills and ability to collaborate with cross‑functional teams.
• Problem‑solver with a growth mindset.

Required skills

• Security incident response and lifecycle management.
• Automation and AI integration for SecOps workflows (e.g., automated phishing triage, AI‑driven anomaly detection).
• Attack and mitigation techniques in AWS, GCP, or Azure environments.
• Forensic analysis on Windows, Linux/Unix (and optionally macOS) systems.
• Experience with log review, cloud investigations, and root‑cause analysis.