SecOps Expert

职位要求 / 描述

<div class="content-intro"><p>The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more. </p></div><p> </p> <p>The Security &amp; Information team is looking for someone who is passionate about technology and has a roll-up-their-sleeves mentality to join our global team. You’ll play a crucial role in enhancing our security infrastructure, improving networking, ensuring scalability, and maintaining strong security as we continue to grow. If you want to be an industry leader, on a team experiencing hyper-growth, look no further! </p> <h1>What you’ll do </h1> <p>In this role, you will:</p> <ul> <li><strong>Secure our infrastructure:</strong> Manage and administer various security platforms, technologies, and tools.</li> <li><strong>Guide the team:</strong> Provide expert advice and support to the team on complex security matters.</li> <li><strong>Leverage AI &amp; ML:</strong> Use Machine Learning and Generative AI to automate workflows and build intelligent, proactive security solutions.</li> <li><strong>Manage threats:</strong> Quickly identify breach attempts, contain and eradicate threats, and streamline incident response processes.</li> <li><strong>Drive continuous improvement:</strong> Continuously test our security controls and leverage threat intelligence to help the business make informed decisions.<br><br><em>This is a hybrid position requiring regular on-site presence at our New York office. Must be located in the New York metropolitan area or willing to commute.</em></li> </ul> <p> </p> <h1>Responsibilities </h1> <ul> <li>Investigate alerts, triage, deep dive, and come up with proper action items and remediation plans, leveraging AI-driven insights for faster context gathering and alert prioritization.</li> <li>Perform host-based analysis, artifact analysis, and malware analysis in support of security investigations and incident response.</li> <li>Coordinate investigation, containment, and other response activities with business stakeholders and groups.</li> <li>Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.</li> <li>Recommend or develop new detection logic and tune existing sensors/security controls, incorporating machine learning models to reduce false positives and improve detection efficacy.</li> <li>Work with security solutions owners to assess existing security solutions' ability to detect/mitigate advanced TTPs, identifying opportunities to augment traditional controls with AI-based defenses.</li> </ul> <ul> <li>Occasional weekend and on-call support is required.</li> </ul> <h1>Minimum Requirements </h1> <ul> <li><strong>4+ years experience</strong> working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) creating, escalating, and managing security incidents, <strong>utilizing both traditional and AI-augmented SOC tools</strong>.</li> <ul> <li>Managing low to high-risk cybersecurity alerts, and incidents, leveraging ML&amp;AI-based anomaly detection for efficient monitoring and analysis, and responding to security threats.</li> <li>Collaborating with stakeholders to drive incident response and remediation.</li> <li>Development of common runbooks for most frequent or critical incident types.</li> </ul> <li>3+ years of working with security tools such as SIEM, Analytics &amp; Intelligence, Intrusion Detection, Malware detection, Data Loss Protection, and Identity &amp; Access Management</li> <li>Familiarity with cloud services, Kubernetes, cloud environment architecture, and the major cloud providers (AWS,

技能关键字

职责方向