{"id":64690,"url":"https://alion.io/job/fireworks-security-operations-lead","title":"Security Operations Lead","company":{"id":18243,"name":"Fireworks AI","domain":"fireworks.ai","url":"https://alion.io/company/fireworks","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"B","score":81,"open_postings":14,"ghost_share":0,"stale_share":0.571,"repost_share":0,"time_to_fill_p50_days":62,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Mateo, United States","New York, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":180000,"max":210000,"currency":"USD","period":"year","gross":null,"usd_annual":210000},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Fireworks AI","optional":false},{"name":"GCP","optional":false},{"name":"Incident Management","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"Multimodal AI","optional":true},{"name":"PagerDuty","optional":true},{"name":"PyTorch","optional":true},{"name":"Splunk","optional":true},{"name":"Sumo Logic","optional":true}],"status":"closed","first_seen_at":"2026-08-20T00:37:27Z","employer_posted_date":"2026-08-20","last_verified_at":"2026-10-19T22:59:39Z","board_verified":false,"closed_at":"2026-10-19T22:59:39Z","days_open":60,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":60},"description":"About Us:\nFireworks is the platform for specialized intelligence, enabling companies to build, train, and serve AI models tailored to their own data, workflows, and products. Founded by the team behind PyTorch and backed by AMD, Atreides, Benchmark Capital, Index Ventures, Lightspeed, NVIDIA, Sequoia Capital, and TCV, Fireworks powers production AI with hundreds of state-of-the-art open models across text, image, embedding, audio, and multimodal workloads. Today, Fireworks is a Series D company valued at $17.5 billion, bringing together an ambitious, collaborative team that's building the future of enterprise AI.\nAbout the role\nWe're hiring our first Security Operations Lead to build and run the SecOps function at Fireworks AI. As we scale our AI infrastructure platform globally, we're investing in a modern detection and response capability anchored on CrowdStrike (EDR and SIEM, 365-day retention), Console AI for ticketing, and Incident.io for on-call and incident management. We have a Security Incident Response Plan (SIRP) in place that you'll build on, and you'll own the function end-to-end: standing up detection content, operationalizing our incident response playbooks, running threat intel into action, and building the operational muscle that keeps Fireworks resilient as we grow. This role sits within the Security team and will primarily support Corporate Security and own incident response broadly, while partnering closely with Security Engineering on infrastructure-related incidents - bridging both areas. This is an IC-to-manager role: you’ll start hands-on building and running the function, growing into a people leader as the team scales.\nWhat you'll do\nLead the rollout, tuning, and ongoing operation of CrowdStrike across our endpoint and cloud environment and SIEM use cases, partnering with IT and Security Engineering on deployment and coverage\n\nDefine and operate our detection and response program: build detection content, establish triage and escalation workflows, and continuously measure and improve coverage against frameworks like MITRE ATT&CK\n\nOwn incident response end-to-end: operationalize our existing SIRP into detailed playbooks, run incidents, lead post-incident reviews, and drive lessons learned into program improvements\n\nStand up our security operations workflow, including SOAR automation with Incident.io for alerting, on-call, and incident orchestration, while also defining how incidents self-submitted through our IT ticketing system are triaged and handled as one-off cases - along with the SLAs and metrics the function runs on\n\nBuild and operationalize a threat intelligence capability: track threats relevant to AI infrastructure and our customer base, and translate intel into detections, hardening, and tabletop scenarios\n\nPartner closely with Infrastructure, Corporate Security, and other cross-functional teams across the organization, engaging as needed to support incidents and shared initiatives\n\nHow the role will grow\nAs the function matures, you'll have the opportunity to:\nHire and build the SecOps team, growing from IC to people leader\n\nExpand 24x7 coverage and adjacent capabilities like cloud detection engineering, insider threat, or red team / purple team operations\n\nShape the broader security strategy as a senior leader in the function\n\nWhat we're looking for\n7+ years in security operations, detection and response, incident response, or a closely related field\n\nHands-on experience with EDR platforms (CrowdStrike strongly preferred; SentinelOne, Defender, or similar also relevant) including detection engineering and tuning\n\nStrong detection engineering background: you've written, tested, and maintained detection content at scale and understand the tradeoffs between coverage, fidelity, and analyst load\n\nDemonstrated incident response leadership: you've run real incidents from triage through executive communication and post-incident review\n\nStrong scripting and automation skills (Python, SOAR platforms) applied to detection, response, and reporting workflows\n\nWorking knowledge of cloud security operations (AWS, GCP, or Azure) and the unique telemetry, attack patterns, and response considerations of cloud-native environments\n\nExperience building or significantly maturing a SecOps function, including tooling selection, process design, and metrics\n\nComfort operating in a build phase: you can write the playbook and run the playbook, and you know when to invest in process versus when to just get things done\n\nNice to have\nExperience with SIEM detection engineering at scale (CrowdStrike Falcon LogScale/NG-SIEM, Splunk, Sumo Logic, Panther, or similar)\n\nExperience with Incident.io, PagerDuty, or comparable incident management tooling\n\nThreat intelligence experience, including operationalizing intel into detection and hardening outcomes\n\nPrior experience at an AI, cloud infrastructure, or high-growth SaaS company\n\nCertifications such as GCIA, GCIH, GCFA, OSCP, or similar\n\nWhy Fireworks?\nSolve Hard Problems: Tackle challenges at the forefront of AI infrastructure, from low-latency inference to scalable model serving.\n\nBuild What’s Next: Work with bleeding-edge technology that impacts how businesses and developers harness AI globally.\n\nOwnership & Impact: Join a fast-growing, passionate team where your work directly shapes the future of AI-no bureaucracy, just results.\n\nLearn from the Best: Collaborate with world-class engineers and AI researchers who thrive on curiosity and innovation.\n\nFireworks AI is an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all innovators.","description_format":"text","description_chars":5649,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["LLM & Generative AI","MLOps","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-08-20T00:37:27Z"},{"event":"open","at":"2026-09-09T11:06:56Z"},{"event":"close","at":"2026-10-19T22:59:39Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 35","filings_12m":35,"filings_prev_12m":11,"green_card_filings_12m":0,"median_offered_wage_usd":233357,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":3}],"liveness":null,"pay":{"stated_usd_annual":210000,"is_top_pay":true},"html_url":"https://alion.io/job/fireworks-security-operations-lead","json_url":"https://alion.io/job/fireworks-security-operations-lead.json","meta":{"generated_at":"2026-10-21T21:16:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30232,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18243},"rest":"https://alion.io/mcp/rest/get_company?id=18243"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffireworks-security-operations-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffireworks-security-operations-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffireworks-security-operations-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/fireworks-security-operations-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffireworks-security-operations-lead"}]}