Platform Security Operations Manager

<p><strong><span data-contrast="none"><span data-ccp-parastyle="Body Text">AI </span><span data-ccp-parastyle="Body Text">FactoryOS</span><span data-ccp-parastyle="Body Text"> Operations</span></span></strong><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><span data-contrast="auto"><span data-ccp-charstyle="normaltextrun" data-ccp-charstyle-defn="{"ObjectId":"ac0262f4-8a9e-5820-b908-2d943c5f7113|1","ClassId":1073872969,"Properties":[201342446,"1",201342447,"5",201342448,"1",201342449,"1",469777841,"Calibri",469777842,"Arial",469777843,"Calibri",469777844,"Calibri",201341986,"1",469769226,"Calibri,Arial",268442635,"22",469775450,"normaltextrun",201340122,"1",134233614,"true",469778129,"normaltextrun",335572020,"1",469778324,"Default Paragraph Font"]}">AI </span><span data-ccp-charstyle="normaltextrun">FactoryOS</span><span data-ccp-charstyle="normaltextrun"> is Firmus' proprietary operating system for the AI Factory. It governs GPU telemetry, cooling, power and grid interaction as one integrated layer, so that every Firmus site can be </span><span data-ccp-charstyle="normaltextrun">optimised</span><span data-ccp-charstyle="normaltextrun"> and monitored as a single system.</span></span><span data-ccp-props="{"134233117":true,"134233118":true,"134245417":true}"> </span></p> <p><span data-contrast="auto">AI FactoryOS Operations runs that platform in production and owns the 24/7 reliability of AI FactoryOS, Firmus AI Cloud and the platforms built on them, together with the service levels the estate is measured against.</span><span data-ccp-props="{"335559738":240,"335559739":240}"> </span></p> <p><span data-contrast="auto"><span data-ccp-parastyle="paragraph" data-ccp-parastyle-defn="{"ObjectId":"aaed607e-c2a3-5841-9fb4-41037bfa0faf|1","ClassId":1073872969,"Properties":[469777841,"Times New Roman",469777842,"Times New Roman",469777843,"Times New Roman",469777844,"Times New Roman",469769226,"Times New Roman",201342446,"1",201342447,"5",201342448,"1",201342449,"1",201341986,"1",268442635,"24",469775450,"paragraph",201340122,"2",134233614,"true",469778129,"paragraph",335572020,"1",335559705,"2057",335551547,"3081",134233118,"true",134233117,"true",134245417,"true",469778324,"Normal"]}">The remit is an engineering one. The function builds the guarded automation, remediation and operational tooling that turn manual response into a software-defined </span><span data-ccp-parastyle="paragraph">capability, and</span><span data-ccp-parastyle="paragraph"> builds and operates the shared services the estate's own operation depends on. The function works closely with the engineering teams that build the platform, supplying the production evidence that shapes what they fix and what they build next.</span></span><span data-ccp-props="{"134233117":false,"134233118":false,"134245417":true,"335559738":0,"335559739":0}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="Body Text">Platform Security Operations Manager</span></span></strong> </p> <p><em><strong>Location : Sydney or Melbourne or Singapore <span data-contrast="none"><span data-ccp-parastyle="FIR Body List">with travel to Australian AI Factory sites as required.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></strong></em></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="Body Text">Role Summary</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></strong></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body" data-ccp-parastyle-defn="{"ObjectId":"baa2b379-a6d3-56f4-af2b-6a08de9434e5|1","ClassId":1073872969,"Properties":[469777841,"Aeonik",469777842,"Aeonik",469777843,"Aeonik",469777844,"Aeonik",469769226,"Aeonik",201342446,"1",201342447,"5",201342448,"1",201342449,"1",201341986,"1",268442635,"20",335551500,"197122",335559740,"264",201341983,"0",335559738,"145",469775450,"FIR Body",201340122,"2",134234082,"true",134233614,"true",469778129,"FIRBody",335572020,"1",469778324,"Body Text"]}">Firmus runs large-scale, state-of-the-art AI infrastructure built on the latest generation of GPU rack-scale systems and operated as one estate to power the next generation of AI innovation. The Platform Security Operations Manager leads the Platform Security team and is the manager of the AI Factory's Computer Security Incident Response Team (CSIRT): the team that detects, responds to and recovers from security incidents across AI FactoryOS, Firmus AI Cloud, the platforms built on them and the tenant workloads they carry, and that operates the security controls which keep the AI Factory defensible as it grows. </span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body">This is a hands-on security leadership role. The role manages the AI Factory's security incident response capability: the 24/7 security on-call roster, the incident response plan and playbooks, the exercises that prove they work, and the coordination with incident command and with Cyber Security and Operations leadership when an incident is live. It also manages the operational security the team delivers in production: runtime detection and enforcement, the security gates in the delivery pipeline, the security content of the multi-tenant Kubernetes estate, the security exception register and the independent monitoring of </span><span data-ccp-parastyle="FIR Body">privileged activity.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="Body Text">Key Responsibilities</span></span></strong><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List" data-ccp-parastyle-defn="{"ObjectId":"15ef5dd6-cc84-5693-b085-6dad75ec09b1|1","ClassId":1073872969,"Properties":[469777841,"Aeonik",469777842,"Aeonik",469777843,"Aeonik",469777844,"Aeonik",469769226,"Aeonik",201342446,"1",201342447,"5",201342448,"1",201342449,"1",201341986,"1",268442635,"20",335551500,"197122",335559740,"264",201341983,"0",335559738,"145",469775450,"FIR Body List",201340122,"2",134234082,"true",134233614,"true",469778129,"FIRBodyList",335572020,"1",469778324,"Body Text"]}">Lead and manage the Platform Security team, including hiring, onboarding, performance, development and wellbeing across regions.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Manage the AI Factory's CSIRT and its</span><span data-ccp-parastyle="FIR Body List"> 24/7 security on-call roster, so the team is ready to respond at any hour.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Manage the AI Factory security incident response plan: severity classification aligned to the function's severity model, </span><span data-ccp-parastyle="FIR Body List">and clear escalation paths from the operations and engineering teams.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Lead the security response during live incidents: direct triage, containment, eradication and recovery, and keep the incident commander and leadership informed with clear and accurate security assessments.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Manage the security incident playbooks for the AI Factory's main threat </span><span data-ccp-parastyle="FIR Body List">scenarios, </span><span data-ccp-parastyle="FIR Body List">and</span><span data-ccp-parastyle="FIR Body List"> run regular exercises and tabletop tests with the incident commanders, the engineering teams and </span><span data-ccp-parastyle="FIR Body List">operations </span><span data-ccp-parastyle="FIR Body List">leadership.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Manage evidence handling and chain of custody for security incidents, </span><span data-ccp-parastyle="FIR Body List">work with Cyber Security leadership to bring in external forensics support when needed,</span><span data-ccp-parastyle="FIR Body List"> and keep Cyber Security and Operations leadership supplied with the facts, timeline and recommendations they need during and after an incident.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Lead security post-incident reviews and drive the resulting fixes to closure </span><span data-ccp-parastyle="FIR Body List">through problem management</span><span data-ccp-parastyle="FIR Body List"> and the engineering backlogs, and work with vendor security teams </span><span data-ccp-parastyle="FIR Body List">on faults and vulnerabilities in the products the AI Factory uses.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Track vulnerabilities and threat intelligence relevant to GPU infrastructure, Kubernetes, </span><span data-ccp-parastyle="FIR Body List">the identity stack and the products and vendors the AI Factory uses,</span> <span data-ccp-parastyle="FIR Body List">assess what the AI Factory must act on, and agree priorities and timeframes with the teams that apply the fix.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="9" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Manage the operational security standard the team delivers for the AI Factory: runtime detection and enforcement, the security gates in the delivery pipeline, the admission, workload identity and network policy content of the multi-tenant Kubernetes estate, and the security acceptance requirements a release </span><span data-ccp-parastyle="FIR Body List">has</span><span data-ccp-parastyle="FIR Body List"> to meet.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="10" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Manage the security exception process and register, with owners, time limits and compensating controls, and manage the independent monitoring of privileged activity across the estate, keeping the separation between the team that builds access and the team that monitors it.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="11" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Provide the security evidence the team's controls produce for audit and customer due </span><span data-ccp-parastyle="FIR Body List">diligence, and</span><span data-ccp-parastyle="FIR Body List"> turn findings from incidents and testing into clear engineering requirements for the platform and infrastructure teams.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Keep the team's detection, evidence, forensics and incident response tooling fit for purpose, and keep detection coverage growing with the AI Factory.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <p><strong><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Skills & Experience</span></span></strong><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><span data-contrast="none"><span data-ccp-charstyle="normaltextrun">Required Skills</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Significant experience </span><span data-ccp-parastyle="FIR Body List">leading a CSIRT in a 24/7</span><span data-ccp-parastyle="FIR Body List"> production environment, </span><span data-ccp-parastyle="FIR Body List">including owning the incident response plan</span><span data-ccp-parastyle="FIR Body List">, playbooks and exercises, </span><span data-ccp-parastyle="FIR Body List">and directing the response to security incidents from</span><span data-ccp-parastyle="FIR Body List"> containment decisions and evidence handling through to post-incident review.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">A hands-on technical security background in large-scale </span><span data-ccp-parastyle="FIR Body List">on-premises and</span><span data-ccp-parastyle="FIR Body List"> self-hosted infrastructure, covering bare-metal servers, Linux, Kubernetes, network security, identity and privileged access, and runtime detection, strong enough to direct senior engineers during an incident and judge the quality of their findings.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Experience operating security controls under ISO 27001, SOC 2 or NIST frameworks and </span><span data-ccp-parastyle="FIR Body List">producing the evidence that audits and customer due diligence require</span><span data-ccp-parastyle="FIR Body List">.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Clear communication and judgement under pressure, able to brief security and operations leadership during an incident, say what is known and not yet known, and make a containment call with incomplete information.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Experience with security monitoring, detection and case management tooling (for example SIEM platforms, </span><span data-ccp-parastyle="FIR Body List">eBPF</span><span data-ccp-parastyle="FIR Body List">-based runtime tools such as Falco or Tetragon, and Jira Service Management or ServiceNow).</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <p><span data-contrast="none"><span data-ccp-charstyle="normaltextrun">Preferred Experience</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Experience securing self-hosted, multi-tenant GPU or HPC infrastructure and AI workloads.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="7" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Experience in a multi-tenant service provider, cloud or colocation environment with contractual security obligations.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="8" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Experience with digital forensics on bare-metal Linux and container environments, </span><span data-ccp-parastyle="FIR Body List">and with working alongside external forensics specialists.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="9" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Experience with</span><span data-ccp-parastyle="FIR Body List"> incident response frameworks such as NIST SP 800-61 and the FIRST CSIRT services framework.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="10" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Relevant certification (for example GCIH, GCFA, CISSP, CISM, or a Kubernetes security credential).</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="16" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="11" data-aria-level="1"><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">A Bachelor's degree in computer science, engineering, cyber security or a related discipline, or an equivalent combination of relevant experience and training.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></li> </ul> <p><strong><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Expected Outcomes</span></span></strong><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="13" data-aria-level="1"><span data-contrast="auto">The incident response plan and 24/7 security on-call roster in place and published within the first quarter, with cover across regions.</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="14" data-aria-level="1"><span data-contrast="auto">Security incident playbooks in place for the main threat scenarios, exercised at least quarterly, and executable by any engineer on the roster.</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="15" data-aria-level="1"><span data-contrast="auto">Security incidents contained and resolved within agreed targets, working with incident command, with evidence preserved under chain of custody and post-incident actions closed by their agreed dates.</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="16" data-aria-level="1"><span data-contrast="auto">Security incident severity levels mapped to the function's severity model, with escalation to Cyber Security and Operations leadership agreed before it is needed.</span><span data-ccp-props="{}"> </span></li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="17" data-aria-level="1"><span data-contrast="auto">Runtime detection covering the AI Factory, with an alert set that stays actionable as the estate grows, and detection gaps found in exercises or incidents closed.</span><span data-ccp-props="{}"> </span></li> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="18" data-aria-level="1"><span data-contrast="auto">Production releases meeting the security acceptance requirements, with any exceptions time-bound and tracked.</span><span data-ccp-props="{}"> </span></li> <li data-leveltext="" data-font="Symbol" data-listid="49" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="19" data-aria-level="1"><span data-contrast="auto">Security evidence produced through normal operation and accepted at first pass in audit and customer due diligence.</span><span data-ccp-props="{}"> </span></li> </ul> <p><strong><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">On-call</span><span data-ccp-parastyle="FIR Body List">:</span></span></strong><span data-contrast="none"><span data-ccp-parastyle="FIR Body List"> The function runs 24/7. </span><span data-ccp-parastyle="FIR Body List">First-line monitoring</span><span data-ccp-parastyle="FIR Body List"> and first response sit with the operations centre. This role is the escalation point for the security on-call roster and leads the security response to major incidents under the duty incident commander.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="FIR Body">Reporting to:</span></span></strong><span data-contrast="none"><span data-ccp-parastyle="FIR Body"> Reports to the Head of AI FactoryOS Operations, working under broad direction with a high degree of autonomy. This role leads a team of 5 to 10 security engineers.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Employment Basis</span></span></strong><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Full-time</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Diversity</span></span></strong><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">At Firmus, we are committed to building a diverse and inclusive workplace. We encourage applications </span></span> <br><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">from candidates of all backgrounds who are passionate about creating a more sustainable future </span></span> <br><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">through innovative engineering solutions.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p> <p><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">Join us in our mission to revolutionize the AI industry through sustainable practices and </span></span> <br><span data-contrast="none"><span data-ccp-parastyle="FIR Body List">cutting-edge engineering. Apply now to be part of shaping the future of sustainable AI infrastructure.</span></span><span data-ccp-props="{"201341983":0,"335559738":145,"335559740":264}"> </span></p>