Product Security Engineer – Cloud & AI Security

The world of digital assets is accelerating in speed, magnitude, and complexity, opening the door to new ways for leveraging the blockchain. Fireblocks’ platform and network provide the simplest and most secure way for companies to work with digital assets and it trusted by some of the largest financial institutions, banks, globally-recognized brands, and Web3 companies in the world, including BNY Mellon, BNP Paribas, ANZ Bank, Revolut, and thousands more.

As a Product Security Engineer – Cloud & AI Security, you will play a key role in securing Fireblocks multi-cloud infrastructure, embedding security into DevSecOps, and ensuring AI platforms and agentic integrations are built and operated with enforceable security controls.

This role requires deep, hands-on expertise across Cloud Infrastructure Security and AI Security. You will actively design, implement, and enforce security controls across multi-cloud environments and Agentic AI, working closely with R&D, Product, and DevOps teams to embed security directly into architecture and development from day one.

You will operate at the forefront of cloud security, AI and blockchain, helping define how agentic AI systems are implemented safely in production. This is an opportunity to work on cutting edge technologies, collaborate with experienced security and engineering professionals, and grow within one of the most advanced and rapidly evolving domains in modern security.

What You'll Do:

• Design, implement, and maintain security controls across multi-cloud infrastructures

• Work closely with R&D teams to understand constraints and risks in Agentic AI and Infrastructure

• Design and implement runtime AI security controls (guardrails, filters, policy engines, gateways).

• Build protections for LLM inference, agent tool execution, MCP / plugin frameworks, and RAG pipelines.

• Implement prompt, input, and output inspection for abuse, jailbreaks, data leakage, and policy violations.

• Secure Infrastructure, CI/CD pipelines, and automation workflows by embedding DevSecOps best practices

• Conduct security reviews of product features, new technologies and ensure they meet security requirements.

• Secure Kubernetes clusters and containerized workloads in production environments

• Evaluate AI attack vectors (prompt injection, model poisoning, data exfiltration, jailbreaks, emerging attack patterns) and implement effective mitigations

• Collaborate with other security teams to resolve security issues and implement security improvements.

• Lead security projects and initiatives across Fireblocks environments to enhance the platform's security.

What You'll Bring:

• At least 3 years of experience with AWS, GCP, or Azure

• Experience working with Agentic AI platforms such as Onyx, Noma, Cyata, Pilar, AKTO, or similar enterprise Agentic AI, strong plus but not mandatory.

• Strong knowledge and experience with DevSecOps practices

• In-depth knowledge of security best practices and technologies, including encryption, identity and access management, and network security

• Experience with securing Kubernetes

• Proficiency with cloud security tools such as CSPM, CWPP, CADR

• Strong communication and collaboration skills, with the ability to work effectively with cross-functional teams

• Experience in leading security projects across complex multi-cloud architectures

• Industry certifications, CISSP,, AWS Certified Security Specialty, or AI security certifications

Fireblocks' mission is to enable every business to easily and securely access digital assets and cryptocurrencies. In order to do that, we strongly believe our workforce should be as diverse as our clients, and this is why we embrace diversity and inclusion in all its forms.

Please see our candidate privacy policy here.