Note: The job is a remote job and is open to candidates in USA. Fireworks AI is a platform for specialized intelligence that enables companies to build, train, and serve AI models tailored to their data, workflows, and products. The Security Operations Lead will build and run the SecOps function, leading detection and response, incident response, threat intelligence, security operations workflows, and collaboration across Corporate Security, Infrastructure, and Security Engineering. The role begins as a hands-on position and is expected to grow into a people leadership role.
Responsibilities
- Lead the rollout, tuning, and ongoing operation of CrowdStrike across our endpoint and cloud environment and SIEM use cases, partnering with IT and Security Engineering on deployment and coverage
- Define and operate our detection and response program: build detection content, establish triage and escalation workflows, and continuously measure and improve coverage against frameworks like MITRE ATT&CK
- Own incident response end-to-end: operationalize our existing SIRP into detailed playbooks, run incidents, lead post-incident reviews, and drive lessons learned into program improvements
- Stand up our security operations workflow, including SOAR automation with Incident.io for alerting, on-call, and incident orchestration, while also defining how incidents self-submitted through our IT ticketing system are triaged and handled as one-off cases — along with the SLAs and metrics the function runs on
- Build and operationalize a threat intelligence capability: track threats relevant to AI infrastructure and our customer base, and translate intel into detections, hardening, and tabletop scenarios
- Partner closely with Infrastructure, Corporate Security, and other cross-functional teams across the organization, engaging as needed to support incidents and shared initiatives
- Hire and build the SecOps team, growing from IC to people leader
- Expand 24x7 coverage and adjacent capabilities like cloud detection engineering, insider threat, or red team / purple team operations
- Shape the broader security strategy as a senior leader in the function
Skills
- 7+ years in security operations, detection and response, incident response, or a closely related field
- Hands-on experience with EDR platforms (CrowdStrike strongly preferred; SentinelOne, Defender, or similar also relevant) including detection engineering and tuning
- Strong detection engineering background: you've written, tested, and maintained detection content at scale and understand the tradeoffs between coverage, fidelity, and analyst load
- Demonstrated incident response leadership: you've run real incidents from triage through executive communication and post-incident review
- Strong scripting and automation skills (Python, SOAR platforms) applied to detection, response, and reporting workflows
- Working knowledge of cloud security operations (AWS, GCP, or Azure) and the unique telemetry, attack patterns, and response considerations of cloud-native environments
- Experience building or significantly maturing a SecOps function, including tooling selection, process design, and metrics
- Comfort operating in a build phase: you can write the playbook and run the playbook, and you know when to invest in process versus when to just get things done
- Experience with SIEM detection engineering at scale (CrowdStrike Falcon LogScale/NG-SIEM, Splunk, Sumo Logic, Panther, or similar)
- Experience with [Incident.io](http://Incident.io), PagerDuty, or comparable incident management tooling
- Threat intelligence experience, including operationalizing intel into detection and hardening outcomes
- Prior experience at an AI, cloud infrastructure, or high-growth SaaS company
- Certifications such as GCIA, GCIH, GCFA, OSCP, or similar
Benefits
- Solve hard problems at the forefront of AI infrastructure.
- Work with bleeding-edge technology that impacts how businesses and developers harness AI globally.
- Join a fast-growing, passionate team where your work directly shapes the future of AI—no bureaucracy, just results.
- Collaborate with world-class engineers and AI researchers who thrive on curiosity and innovation.
Company Overview
Company H1B Sponsorship