Role Overview

We are looking for a proactive Security Assurance Lead to advance our security program into a proactive "validate and verify" model. Your mission is to ensure our defenses aren't just present, but effective. In this hands-on technical role will own and manage testing, validating and reporting on our security posture, through automated testing against our controls, and ensure our security stack is optimized, integrated, and fully utilized.

Key Responsibilities

• Security Assurance Management: Define, orchestrate and drive the security assurance program from vision to full implementation.
• Continuous Control Validation: Design and execute automated testing (e.g., Breach & Attack Simulation) to verify that prevention and detection controls are functioning across cloud, SaaS and IT environments.
• Central Visibility Hub: Build and maintain a real-time Security Posture Dashboard. This hub will provide a single pane of glass for the coverage and health of our security stack.
• Tool Optimization & Efficacy: Review our existing security suite to ensure tools are properly configured, integrated, and delivering ROI. You will identify "blind spots" where tools are installed but not effectively monitoring or blocking.
• Offensive Testing Strategy: Coordinate regular external offensive testing cycles such as Penetration Testing, Phishing, etc. and translate "broken" controls and findings into actionable items.
• Operational Excellence: Define clear ownership, maintenance schedules, and lifecycle processes for all security technologies to prevent "tool rot."

Required Experience & Qualifications

• 8+ years experience of cybersecurity engineering and architecting (Infosec/DevSecOps).
• Proven technical capabilities in automation, scripting, AI, etc.
• Experience in offensive testing methodologies and practices such as penetration testing, red team exercises, etc.
• Strong understanding of breach simulation, continuous control monitoring (CCM) and technical validation concepts and methodologies.
• Strong understanding of:
• Cloud and SaaS security (WAF, CNAPP)
• Identity, access control, and infrastructure security (IDM, IDP, PAM)
• Endpoint and corporate IT security (EDR, DLP, SASE)

Required Skills & Attributes

• Self-directed architect: Able to take full ownership of the security assurance roadmap from initial design and selection to a working, breathing program.
• Authority without ego: Able to lead across departments without formal reporting lines. While you will operate independently, success is measured by your ability to partner with peers to achieve implementation and ongoing adherence.
• Critical thinking: Able to challenge, validate and verify, while maintaining trust and collaboration with peers and stakeholders.
• Strategic planning: Don’t just patch and quick fix, but ensure correct practices and procedures are developed to provide assurance over time.
• Executive communication: Clear, concise, and credible with senior leadership.
• Analytical thinking: Attention to details and ability to connect multiple dots into a concise and accurate picture.

Nice to Have

• Experience in crypto, fintech, or highly regulated financial environments
• Familiarity with the NIST Cybersecurity Framework (CSF) 2.0, Cloud Security Alliance (CSA) controls matrix, offensive security frameworks (MITRE), etc.

Founded in 2018 and already valued at over $8 billion, Fireblocks is a SaaS platform that helps companies to create innovative products on the blockchain and manage day-to-day crypto operations. Fireblocks is trusted by some of the largest financial institutions, banks, globally recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more, to securely scale digital asset operations through the Fireblocks Network and MPC-based wallet infrastructure. We have offices in New York, London, Tel Aviv, and Singapore, and we are continuing to expand our teams to reach new customers globally.

The Security & Information team is looking for someone who is passionate about technology and has a roll-up-their-sleeves mentality to join our global team. You’ll play a crucial role in enhancing our security infrastructure, improving networking, ensuring scalability, and maintaining strong security as we continue to grow. If you want to be an industry leader, on a team experiencing hyper-growth, look no further! 

Responsibilities 

• Lead the design and implementation of AI-driven detection and response strategies to automate complex security investigations.
• Operates as the primary escalation point for critical security alerts, performing deep-dive DFIR investigations, analyzing attacker techniques and vectors, proactively hunting threats, and directing incident response activities.
• Lead SecOps projects from inception to execution, ensuring effective implementation and ongoing maintenance
• Research how to leverage security telemetry and existing security solutions to improve triage and automated response.
• Work cross-functionally to refine and evolve agentic workflows that drive automated security operations.
• Coordinate investigation, containment, and other response activities with business stakeholders and groups.
• Perform hands-on forensic investigations, log reviews, cloud investigations, and root-cause analysis
• Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.

Minimum Requirements 

• 5+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) addressing, escalating, and managing security incidents and creating incident reports.
• Extensive experience in managing the lifecycle of security incidents in a global, 24/7 production environment..
• Collaborating with various cross-organizational stakeholders to drive incident response and remediation.
• Development of common runbooks for most frequent or critical incident types.
• Strong development fundamentals with experience delivering and maintaining production-grade code.
• Coding & Scripting: Hands-on programming experience (Python, Bash, etc.) with proven ability to build automation processes.
• Proven expertise in attack and mitigation methods within Cloud and SaaS environments 
• Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts.
• Problem solver, an in-depth thinker with a growth mindset.
• Excellent communication skills and ability to work collaboratively with other teams 

Preferred Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field
• Solid understanding of LLM concepts and architectures, with hands-on experience applying them in practice.

The Security & Information team is looking for someone who is passionate about technology and has a roll-up-their-sleeves mentality to join our global team. You’ll play a crucial role in enhancing our security infrastructure, improving networking, ensuring scalability, and maintaining strong security as we continue to grow. If you want to be an industry leader, on a team experiencing hyper-growth, look no further! 

What you’ll do 

In this role, you will:

• Secure our infrastructure: Manage and administer various security platforms, technologies, and tools.
• Guide the team: Provide expert advice and support to the team on complex security matters.
• Leverage AI & ML: Use Machine Learning and Generative AI to automate workflows and build intelligent, proactive security solutions.
• Manage threats: Quickly identify breach attempts, contain and eradicate threats, and streamline incident response processes.
• Drive continuous improvement: Continuously test our security controls and leverage threat intelligence to help the business make informed decisions.
  
  This is a hybrid position requiring regular on-site presence at our New York office. Must be located in the New York metropolitan area or willing to commute.

Responsibilities 

• Investigate alerts, triage, deep dive, and come up with proper action items and remediation plans, leveraging AI-driven insights for faster context gathering and alert prioritization.
• Perform host-based analysis, artifact analysis, and malware analysis in support of security investigations and incident response.
• Coordinate investigation, containment, and other response activities with business stakeholders and groups.
• Develop incident analysis and findings reports for management, including gap identification and recommendations for improvement.
• Recommend or develop new detection logic and tune existing sensors/security controls, incorporating machine learning models to reduce false positives and improve detection efficacy.
• Work with security solutions owners to assess existing security solutions' ability to detect/mitigate advanced TTPs, identifying opportunities to augment traditional controls with AI-based defenses.

• Occasional weekend and on-call support is required.

Minimum Requirements 

• 4+ years experience working in an Incident Response/Cyber Security Operations Center (in-house or outsourced) creating, escalating, and managing security incidents, utilizing both traditional and AI-augmented SOC tools.
• Managing low to high-risk cybersecurity alerts, and incidents, leveraging ML&AI-based anomaly detection for efficient monitoring and analysis, and responding to security threats.
• Collaborating with stakeholders to drive incident response and remediation.
• Development of common runbooks for most frequent or critical incident types.
• 3+ years of working with security tools such as SIEM, Analytics & Intelligence, Intrusion Detection, Malware detection, Data Loss Protection, and Identity & Access Management
• Familiarity with cloud services, Kubernetes, cloud environment architecture, and the major cloud providers (AWS, GCP, Azure)
• Solid understanding of system and security controls on at least two OSs (Windows, Linux / Unix, and MacOS (Advantage), including host-based forensics and experience with analyzing OS artifacts.
• Problem solver, an in-depth thinker with a growth mindset, and a strong drive to integrate AI and machine learning into daily security operations.

Preferred Qualifications

• Experience with developing or integrating AI-driven tools (e.g., leveraging LLMs or ML models) to automate and enhance SecOps workflows, such as threat hunting or alert triaging.
• Bachelor's degree in Computer Science, Information Technology, or related fieldץ
• Familiarity with Infrastructure as Code (IaC) and DevSecOps practices, including monitoring controls across CI/CD pipelines.

Making Security Real

As a Senior Information Security Engineer, you’ll be on the front lines of protecting the systems, users, and data at scale. This role is about turning strategy, architecture, and intent into enforced controls, effective detections, and resilient operations. You’ll work hands-on with the tools, signals, and incidents that define our real security posture.

If you believe security should be practical, measurable, and embedded into daily operations—and not just documented—we want you on the team.

What the Role Looks Like in Practice

You will be the technical anchor of our internal security posture:

• Architectural Ownership: Deploy, manage, and tune enterprise-grade security stacks (EDR, DLP, IAM, CASB, MDM) with a focus on deep integration and automation.
• The AI Frontier: Lead the charge on AI Security. You will implement and secure AI-driven workflows, ensuring LLM use is governed and protected against emerging threats such as data leakage and prompt injection.
• Proactive Defense: Build and maintain high-fidelity detections and guardrails that align with real-world attack techniques.
• Cross-Functional Synergy: Partner as a peer with Engineering, IT, and DevOps to ensure security controls are frictionless, automated, and effective.

What You’ll Bring

Technical Must-Haves:

• 7+ Years of Senior Experience: Extensive hands-on experience in InfoSec Engineering or SecOps within high-growth, cloud-native environments.
• AI Security Mastery (Required): You are ahead of the curve. You have practical experience securing AI adoption and leveraging AI-driven platforms to scale defensive capabilities.
• Deep Technical Stack: Expert-level knowledge of endpoint security (macOS/Linux), SaaS ecosystems, and Identity (Okta/OIDC).
• The Developer Mindset: Advanced scripting skills (Python is a must) to automate away manual toil and build custom security integrations.

Professional & Interpersonal Excellence:

• Strategic Communication: The ability to articulate complex technical risks as actionable business intelligence for diverse stakeholders, ensuring alignment between security objectives and business goals.
• Collaborative Influence: A track record of fostering strong partnerships with R&D and DevOps. You are a facilitator of "Secure-by-Design" principles, focused on engineering solutions rather than creating administrative bottlenecks.
• Crisis Management & Decisiveness: The capacity to maintain operational composure during high-stakes incidents, applying rigorous prioritization and risk-based analysis to drive remediation.
• Pragmatic Professionalism: A disciplined approach to balancing theoretical security ideals with the functional requirements of a high-velocity, global financial infrastructure.

• Engineer, Don’t just triage: Move beyond manual reviews to build code-driven detection logic and custom AI agents that automate vulnerability hunting, triaging and remediation.
• Security by design: Partner with R&D teams (including Infra and DevOps) to define the application-level technical guardrails for internal and external-facing products.
• Scout the Frontier: Act as an early adopter of state-of-the-art systems, evaluating and integrating cutting-edge tech from frontier security startups in AI and Cloud Runtime security.

• Promote Enterprise-Grade Security Initiatives: Engineer and scale the security strategy for Fireblocks’ entire product ecosystem, spanning both internal infrastructure and external-facing products. You will ensure code security at scale by hardening the SDLC, securing the Software Supply Chain perimeter, and designing the technical guardrails for AI adoption at both the enterprise and product levels.
• AI Solutions Builder: scale our security program using AI-driven tools. You will develop and fine-tune autonomous agents to handle complex code analysis, vulnerability hunting, and automated remediation.
• Drive Early Adoption of Frontier Tech: Act as a scout and evaluator for the world’s most innovative security startups. You’ll partner with cutting-edge vendors in emerging fields like AI Security and Cloud Runtime Security, ensuring Fireblocks remains an early adopter of state-of-the-art defensive systems.
• Scale Through Engineering: Move beyond manual reviews. You’ll manage and extend AppSec tools to eliminate false positives and build custom logic that reflects our unique codebase.
• Collaborative Engineering: Work alongside our in-house DevOps team to rapidly deploy custom security tools at an enterprise grade.

• You see a manual task and immediately think about how to automate it with a script or an LLM.
• You enjoy the challenge of securing industry-novel risks that don't have a "best practice" handbook yet.
• You value simplicity in design and believe that security should be a developer enabler, not a blocker.
• You thrive in fast-paced environments where "status quo" is a dirty word.

• Ownership: You’ll have the autonomy to propose and lead high-impact security initiatives.
• Cutting-Edge Stack: Work with the latest in AI, blockchain infrastructure, and cloud security.
• A "Rapid" Culture: Our in-house DevOps capability means your tools get deployed and scaled across the enterprise in days, not months.
• Mentorship & Growth: Collaborate with world-class experts in cryptography and cybersecurity who are committed to your professional evolution.

Fireblocks is seeking a visionary and experienced Senior Director of AI Transformation to lead our enterprise-wide AI strategy. Reporting directly to the CIO this high-impact leadership role will be instrumental in shaping and executing our AI strategy, and elevate business processes by designing innovative AI-driven solutions to increase productivity, reduce operational overhead, and unlock new value. The ideal candidate brings a strong background in business analysis, deep knowledge of emerging AI technologies, and a proven ability to translate strategy into scalable, secure, and measurable outcomes.

What you’ll do:

• Design future-state workflows using Generative and Agentic AI aligned with business goals, productivity outcomes and user needs.
• Lead cross-functional workshops to identify, prioritize, and shape high-impact AI use cases.
• Conduct deep business process analyses across departments (Sales, CustomerOps, Finance, IT, HR, etc.) to identify areas for automation, augmentation, or reimagination via AI.
• Prioritize high-ROI opportunities for AI integration, with a focus on reducing repetitive manual tasks and improving business delivery.
• Serve as the internal evangelist and subject matter expert for enterprise AI adoption
• Apply AI and LLMs to reduce costs, improve process efficiency, and modernize legacy operations.
• Build and lead a team of AI/ML engineers to develop scalable, production-ready solutions.
• Guide the effective use of LLMs for tasks such as automation, summarization, classification, and decision support.
• Secure stakeholder buy-in and drive commitment to AI-led change.
• Deliver measurable improvements in productivity, operational cost reduction, and process velocity.
• Partner with business and tech teams to define and execute implementation plans.
• Design and execute a company-wide change management strategy for AI adoption, including training, communication, and stakeholder alignment.

What you’ll bring:

• 9+ years of consistent achievement in driving business transformation, strategic advisory, and innovation.
• Practical experience leading AI, Generative AI, and Agentic AI initiatives aimed at modernizing functions like People, Customer Operations, Sales, Finance, Legal, and Marketing.
• Proven ability to lead multidisciplinary teams from ideation through to successful execution.
• Exceptional communication, facilitation, and narrative-building capabilities tailored for both technical and business-oriented audiences.
• Knowledgeable in applying design thinking techniques to foster innovation and solve complex challenges.
• Proven experience with organizational change management strategies and frameworks for measuring business impact.

For employees hired to work remotely from New York, or from our NYC HQ, Fireblocks is required by law to include a reasonable estimate of the compensation range for this role.This range is specific to New York City, and takes into consideration a wide range of factors that are reviewed when making a hiring decision, such as years of experience, skills, and other business needs. It is not typical for a candidate to be hired at or near the top of the pay range and each compensation decision is dependent on each individual case. A reasonable base salary range estimate for this position is $240,000 to $325,000. The base salary is one component of the total compensation package, which for some roles may include a target bonus, a very competitive equity grant, and very generous benefits. While we believe competitive compensation is a critical aspect of you deciding to join us, we do hope you also spend time considering why our mission and culture are right for you. We are creating something transformational here, and we hope you are as excited about the future as we are.

Role Overview

We are seeking an experienced Incident Response leader to own and lead the company’s response to large-scale, high-impact cyber incidents. This role is responsible not only for technical response, but for cross-company crisis coordination, executive decision support, and ensuring fast, controlled mitigation across engineering, product, legal, communications, and leadership teams.

This is a leadership role for someone who has personally led complex incidents under pressure — including situations involving material business risk, customer impact, regulatory exposure, and executive visibility.

Key Responsibilities

Incident Leadership & Crisis Management

• Serve as the Incident Commander for high-severity cyber incidents, including breaches, supply-chain attacks, insider threats, and platform-wide security events.
• Lead company-wide incident response efforts, coordinating technical, operational, legal, communications, and executive stakeholders.
• Stand up and orchestrate crisis management teams during major incidents, ensuring clear ownership, decision-making, and execution under pressure.
• Drive rapid containment, eradication, and recovery while balancing business continuity, customer impact, and regulatory obligations.
• Act as the primary point of contact to executive leadership during incidents, providing clear, concise, timely, and actionable updates.

Cross-Department Coordination

• Orchestrate response activities across Security, Infrastructure / Cloud Operations, Product & Application Security
• Ensure alignment between technical response actions and business, legal, and regulatory considerations.
• Manage external parties when needed  

Preparedness & Operational Excellence

• Own and continuously improve the incident response framework, including severity definitions, escalation paths, and decision authority.
• Design and run executive-level incident simulations and tabletop exercises, including cross-functional and leadership participation.
• Ensure high-quality post-incident reviews that result in measurable improvements to controls, detection, and response readiness.
• Define and track incident response metrics (MTTD, MTTR, blast radius, decision latency).
• Track and follow-up on lessons learned and enhancements to ensure implementation and continuous improvement.

Required Experience & Qualifications

• 10+ years in cybersecurity, with significant incident response management experience.
• Proven experience leading large-scale, cross-company cyber incidents, including incidents involving:
• Multiple engineering and operational teams
• Executive leadership and board-level visibility
• Demonstrated experience acting as Incident Commander or equivalent role during major security events for at least 15 incidents in the past 5 years.
• Strong understanding of:
• Cloud and SaaS architectures
• Identity, access control, and infrastructure security
• Detection and response technologies (SIEM, EDR, cloud-native tools)
• Offensive background
• Ability to translate technical facts into business impact and risk-based decisions.

Critical Skills & Attributes

• Crisis leadership: Calm, decisive, and structured under extreme pressure.
• Authority without ego: Able to lead across departments without formal reporting lines.
• Executive communication: Clear, concise, and credible with senior leadership.
• Systems thinker: Understands how technical, human, and process failures compound during incidents.
• Bias for action: Moves quickly while maintaining discipline and documentation.
• Analytical thinking: Attention to details and ability to connect multiple dots into a concise and accurate picture.
• Previous experience at Mandiant, Sygnia, CrowdStrike, Unit 42, or similar elite IR teams
• Experience in crypto, fintech, custody, payments, or highly regulated environments
• Hands-on background in forensics, threat hunting, or security engineering

Nice to Have

• Experience in crypto, fintech, cloud infrastructure, or highly regulated environments
• Experience supporting regulatory notifications and post-incident audits
• Background in forensics, threat intelligence, or security engineering
• Familiarity with NIST, ISO 27035, or similar incident response frameworks (practical application, not checkbox compliance)