Proportions (fractions of tested case) are typically described via binomial distribution:
You try $n$ times and observe $k$ successes with probability $p$ for each of your tries.
$$\Pr(X=k)={\binom {n}{k}}p^{k}(1-p)^{n-k}$$
Expectation and variance are:
$$\operatorname {E} (X)=np$$
$$\operatorname {Var} (X)=np(1-p)$$
Now, when measuring your hit and false alarm rates* that is measuring such a binomial $p$.
The point estimate for that based on observing $k$ successes in $n$ trials is $\hat p = \frac{k}{n}$, and its variance is $\operatorname{Var} (\frac{k}{n}) = \frac{p (1-p)}{n}$ (note that last $p$s here are the unknown true probability).
Normal approximation
For sufficiently large $n$, the binomial distribution will be approximately normal with variance $\frac{p (1-p)}{n}$, and that happens faster for $p$ close to 0.5.
This approximation is usually considered OK for a single proportion if both $np$ and $n (1-p)$ are larger than 5 or 10. In your case, this should be met for both hits and false alarms.
Difference between proportions
Fleiss et. al., Statistical Methods for Rates and Proportions (Wiley) in chapter 3 section "method II" gives the z-score for the difference as:
$$z = \frac{|p_2 - p_1| - \frac{1}{2}\left(\frac{1}{n_1} + \frac{1}{n_2}\right)}{\sqrt{\bar p (1 - \bar p) \left(\frac{1}{n_1} + \frac{1}{n_2}\right)}}$$
Here, $p_2$ and $n_2$ would refer to your hits and $p_1$ and $n_1$ to the false alarms.
In the context of null hypothesis testing, the null hyothesis here is $p_2 = p_1$. $\bar p$ is the hypothetical equal probability for both, you can calculate its estimate from the fourfold table. It is also a weighted mean of $p_1$ and $p_2$ (according to the sample sizes).
$-\frac{1}{2}\left(\frac{1}{n_1} + \frac{1}{n_2}\right)$ is a so-called contnuity correction. It improves the approximation of a discrete distribution (counting events) by a continuous distribution.
there exist other approximations for the variance (denominator), and exact calculations. See e.g. the book I linked above for a starting point.
* the term rate is somewhat misleading here (although that's what they are often called): strictly speaking, a rate would describe the number of events within a given time frame (looking for that will get you to Poisson distributions). Here, we have number of events as a fraction of a given number of tests which would be a quote. I'll use proportion or fraction of tested cases to avoid confusion.