Platform Security Operations Manager (AI Infrastructure)

Location: Sydney or Melbourne, Australia, or Singapore, with travel to Australian AI Factory sites as required. The function operates 24/7, and this role is the escalation point for the security on-call roster.

Company

hirify.global develops and operates large-scale sustainable AI infrastructure, including AI FactoryOS, hirify.global AI Cloud, GPU systems, and integrated platforms for monitoring and operating AI Factory sites.

What you will do

• Lead the Platform Security team of 5–10 security engineers, including hiring, onboarding, performance, development, and wellbeing across regions.
• Manage the AI Factory CSIRT, the 24/7 security on-call roster, incident response plans, escalation paths, and security incident playbooks.
• Direct live security incident response, including triage, containment, eradication, recovery, evidence handling, chain of custody, and communication with incident command and leadership.
• Run incident exercises and tabletop tests, lead post-incident reviews, and drive corrective actions through problem management and engineering backlogs.
• Manage operational security controls across runtime detection, delivery-pipeline security gates, Kubernetes admission, workload identity, network policy, security exceptions, and privileged-activity monitoring.
• Track vulnerabilities and threat intelligence, maintain detection and forensics tooling, produce audit and customer-due-diligence evidence, and convert findings into engineering requirements.

Requirements

• Significant experience leading a CSIRT in a 24/7 production environment, including ownership of incident response plans, playbooks, exercises, containment decisions, evidence handling, and post-incident reviews.
• Hands-on technical security experience in large-scale on-premises and self-hosted infrastructure, including bare-metal servers, Linux, Kubernetes, network security, identity and privileged access, and runtime detection.
• Experience operating security controls under ISO 27001, SOC 2, or NIST frameworks and producing evidence for audits and customer due diligence.
• Clear communication and sound judgement under pressure, including briefing security and operations leadership and making containment decisions with incomplete information.
• Experience with security monitoring, detection, and case-management tooling, such as SIEM platforms, eBPF-based runtime tools, and Jira Service Management or ServiceNow.

Nice to have

• Experience securing self-hosted, multi-tenant GPU or HPC infrastructure and AI workloads.
• Experience in a multi-tenant service provider, cloud, or colocation environment with contractual security obligations.
• Experience with digital forensics on bare-metal Linux and container environments and with external forensics specialists.
• Experience with NIST SP 800-61, the FIRST CSIRT services framework, or similar incident response frameworks.
• Relevant certification such as GCIH, GCFA, CISSP, CISM, or a Kubernetes security credential.
• A Bachelor's degree in computer science, engineering, cyber security, or a related discipline, or an equivalent combination of relevant experience and training.

Culture & Benefits

• Full-time employment in a diverse and inclusive workplace.
• Work on sustainable AI infrastructure and large-scale engineering systems.
• High degree of autonomy under broad direction from the Head of AI FactoryOS Operations.
• 24/7 operational coverage with first-line monitoring handled by the operations centre and escalation managed by this role.

Hiring process

• The role is expected to establish and publish the incident response plan and 24/7 security on-call roster within the first quarter.
• Security playbooks are expected to be exercised at least quarterly and executable by any engineer on the roster.