SecOps Expert, Fireblocks

• 5+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced), creating, escalating, and managing security incidents and creating incident reports
• Managing low to high-risk cybersecurity events, alerts, and incidents, event monitoring and analysis, and responding to and escalating IT/DevOps security events and threats and vulnerabilities
• Collaborating with stakeholders to drive incident response and remediation
• Development of common runbooks for most frequent or critical incident types
• 3+ years of working with security tools such as SIEM, Analytics & Intelligence, Intrusion Detection, Malware detection, Data Loss Protection, and Identity & Access Management
• Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts
• Problem solver, an in-depth thinker with a growth mindset
• Excellent communication skills (both verbal and written) and ability to work collaboratively with other teams
• Perform host-based analysis, artifact analysis, and malware analysis in support of security investigations and incident response (Advantage)
• Understanding of cryptographic algorithms utilized by public blockchain networks and other cryptography-related topics. (Advantage)

Desirable

• As a SecOps Expert, you’ll be at the forefront of enhancing our security infrastructure, driving scalability, and keeping our systems strong as we grow
• In this role, you’ll secure and protect our infrastructure by managing cutting-edge security tools, providing expert guidance, and turning product usage data into actionable security strategies
• You’ll build innovative solutions to detect and neutralize threats, streamline incident response, test controls, and use threat intelligence to drive smart business decisions
• You’ll collaborate across teams, handle real-time incidents, and thrive in a fast-paced environment where every day brings new challenges and opportunities to make an impact
• Investigate alerts, triage, deep dive, and come up with proper action items and remediation plans
• Coordinate investigation, containment, and other response activities with business stakeholders and groups
• Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement
• Recommend or develop new detection logic and tune existing sensors/security controls
• Work with security solutions owners to assess existing security solution's ability to detect/mitigate the abovementioned TTPs
• Creating custom SIEM queries to support the monitoring and detection of advanced TTPs against the company network
• Translating product usage data into actionable advice for security
• Provide business guidelines in a regular cadence with Security and technical Stakeholders in collaboration with the Account Team, including Product, DevOps, Support, etc