Security Operations Tech Lead
8.0/10
Fireblocks
$90,000 – $150,000 USD
Office / on-site
senior
9 days ago
cryptosecuritytechIncident ResponseCyber SecurityPythonBashCloudSaaSWindowsLinuxUnix
AI Summary
The vacancy is well-structured with clear responsibilities and requirements, though some details on payment terms and company socials are lacking.
Check Match — Just drop your CV
See your fit for Security Operations Tech Lead in seconds.
Description
What you'll do
- •Operates as the primary escalation point for critical security alerts, performing deep-dive DFIR investigations, analyzing attacker techniques and vectors, proactively hunting threats, and directing incident response activities.
- •Lead SecOps projects from inception to execution, ensuring effective implementation and ongoing maintenance.
- •Mentor a team of SecOps experts, providing technical guidance in a fast-paced environment.
- •Research how to leverage security telemetry and existing security solutions to improve triage and automated response.
- •Work cross-functionally to refine and evolve agentic workflows that drive automated security operations.
- •Coordinate investigation, containment, and other response activities with business stakeholders and groups.
- •Perform hands-on forensic investigations, log reviews, cloud investigations, and root-cause analysis.
- •Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.
Requirements
- •5+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) addressing, escalating, and managing security incidents and creating incident reports.
- •Extensive experience in managing the lifecycle of security incidents in a global, 24/7 production environment.
- •Collaborating with various cross-organizational stakeholders to drive incident response and remediation.
- •Development of common runbooks for most frequent or critical incident types.
- •Strong development fundamentals with experience delivering and maintaining production-grade code.
- •Coding & Scripting: Hands-on programming experience (Python, Bash, etc.) with proven ability to build automation processes.
- •Proven expertise in attack and mitigation methods within Cloud and SaaS environments.
- •Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts.
- •Problem solver, an in-depth thinker with a growth mindset.
- •Excellent communication skills and ability to work collaboratively with other teams.
Loading similar jobs...