Director Application Security

📋 Job Overview

Fireblocks is the company bringing global finance onchain. Backed by over $1 billion in capital, we are the premier digital asset infrastructure provider trusted by thousands of industry-defining financial institutions, including banks, payment providers, fintechs, and global corporates such as BNY Mellon, BNP Paribas, ANZ Bank, Western Union, Stripe, and Revolut. Built for institutional scale and security, our enterprise-grade platform and network have powered over $14 trillion in digital asset transfers worldwide.

🏢 About Fireblocks

Fireblocks' mission is to enable every business to easily and securely access digital assets and cryptocurrencies. In order to do that, we strongly believe our workforce should be as diverse as our clients, and this is why we embrace diversity and inclusion in all its forms.

🎯 The Role

As the Director of Product Security, you will spearhead our efforts to fortify and enhance the security posture of our products and runtime environments and play a critical leadership role in overseeing the design, implementation, and maintenance of security controls for the organization's complex product applications, platform, development and cloud infrastructure.

✅ Key Responsibilities

• Strong leadership skills to develop and lead the strategic direction for the Application and Cloud Security teams.
• Lead risk assessments, threat modeling, and secure design reviews of cloud platforms to proactively identify vulnerabilities and ensure compliance with security standards.
• Oversee the design, implementation, and maintenance of security controls across multi-cloud environments (AWS, GCP, Azure) to protect infrastructure and applications.
• Experience in collaborating with cross-functional teams, including engineering, product management, and customer support, to embed security into product development and all aspects of cloud deployments.

📌 Required Qualifications

• At least 7+ years of experience in security architecture, software development, cloud security, or a related field
• At least 5 years in a leadership role.
• Engineering background - MUST
• Proven leadership skills with a track record of leading high-performing security teams in a fast-paced, technology-driven environment.
• Excellent communication and interpersonal skills, with the ability to articulate complex security concepts to technical and non-technical audiences.
• Professional security certifications (e.g., CISSP, CISM, CCSP, OSCP) are highly desirable.
• Strong technical background in cloud services, DevOps, orchestration tools (e.g., Kubernetes), and cloud-native security tools (CSPM, CWPP).
• Excellent communication and stakeholder management skills, with the ability to influence security initiatives across cross-functional teams.

⭐ Desirable Experience

• Strong background in hands-on development skills, deep knowledge of AWS & Azure cloud platforms with a focus on offensive security techniques.
• Familiarity with application security practices, threat modeling, penetration testing, red teaming, and fuzz testing, to identify and remediate vulnerabilities in applications and cloud environments.
• Drive the adoption of cutting-edge infrastructure cloud security technologies, including data security, encryption, identity and access management (IAM), and network security.
• Expertise in using tools (e.g. CSPM, IaC, SAST, secrets management etc) and methodologies for advanced security analysis, triage of vulnerabilities and other security operations.
• Advantage: Knowledge of cryptographic principles and best practices, including the implementation of encryption, hashing, and digital signatures in applications and managing keys and secrets in cloud environments.

🎁 Benefits

Competitive

🛂 Visa & Eligibility

No specific visa or eligibility information provided.