Shape the Security at Fireblocks

At Fireblocks, security isn’t an afterthought; it’s the foundation of everything we do.
As an Information Security Engineer, you’ll be on the front lines of protecting the systems, users, and data at scale.

This role is about making security real. You’ll turn strategy, architecture, and intent into enforced controls, effective detections, and resilient operations. You’ll work hands-on with the tools, signals, and incidents that define our real security posture.

If you believe security should be practical, measurable, and embedded into daily operations and not just documented, we want you on the team.

What does the role look like in practice?

The Information Security Engineer is deeply involved in the day-to-day security posture of the company:

• Implementing and operating security controls across endpoints, SaaS, and networks
• Monitoring, investigating, and responding to security signals and incidents
• Translating security requirements into enforceable technical configurations
• Identifying gaps, misconfigurations, and risky behavior before they become incidents
  
  

This role requires strong prioritization skills, calm decision-making under pressure, and a risk-based mindset. And pragmatic at all times.

Core Responsibilities (Hands-On by Design)

• Deploy, manage, and tune security tools such as EDR/XDR, DLP, IAM, CASB, MDM, and secure access platforms
• Investigate alerts, suspicious activity, and anomalies across endpoints, SaaS, and cloud environments
• Harden operating systems, browsers, user environments, and endpoint configurations
• Build and maintain detections, policies, and guardrails that align with real attack techniques
• Perform threat modeling and security reviews for new tools, integrations, and workflows
• Work closely with Engineering, IT, and DevOps teams to ensure security controls are implemented correctly
  
  
• Continuously assess security effectiveness and reduce noise, false positives, and operational friction
  Document findings, incidents, decisions, and remediation steps clearly and practically

What You’ll Bring

Must-Haves

• Hands-on experience in information security engineering or security operations
• Strong understanding of endpoint, SaaS, cloud, and identity security
• Experience investigating security incidents and analyzing telemetry
• Practical experience with tools such as EDR/XDR, IAM, DLP, or secure access platforms
• Automation and scripting skills (Python, Bash, or similar)
• Clear, pragmatic communication—you can explain real risk without drama