Cyber Security Manager (AI)

Location: Remote in the UK; London office available

Company

hirify.global builds Orbital, a physics-informed foundation model for energy operations across oil and gas, refineries, and petrochemicals, and develops Metis Red, an agentic security testing platform.

What you will do

• Own security operations end to end, including alert triage, incident declaration, investigation, response, closure, and post-incident reviews.
• Establish monitoring standards, improve detection quality, close coverage gaps, and validate detections against internal red-team attack paths.
• Design, build, operate, and validate an autonomous detection and response capability while maintaining hands-on operational coverage.
• Manage identity and access, privileged access, SSO, secrets, endpoint hardening, EDR, patching, network controls, remote access, and segmentation.
• Own UK IT service operations, the approximately 85-product SaaS estate, procurement, asset management, end-user support, and the on-premise server estate.
• Lead backup security, ransomware recovery, business continuity, disaster recovery exercises, offshore resource development, and operational evidence for ISO 27001 and SOC 2.

Requirements

• At least five years of security operations experience, including two or more years with direct incident-response accountability in a live environment.
• Hands-on AWS and Azure security operations covering logging, monitoring, and identity.
• Experience administering identity and access at scale, including SSO, privileged access, and joiner, mover, and leaver processes.
• Experience managing distributed endpoint fleets, EDR, vulnerability remediation, and security findings through closure.
• Experience operating within an ISO 27001 or SOC 2 control environment and producing audit-accepted evidence.
• Automation-oriented approach with scripting, infrastructure as code, or the ability to direct agentic tooling and validate its output.

Nice to have

• Operational technology or industrial environment experience.
• Practical AI or machine-learning security awareness, including model access, data handling, and prompt safety.
• CREST, GIAC, or equivalent hands-on certification.
• Startup, scale-up, or managed service provider experience.
• Experience managing or coaching offshore or distributed team members.

Culture & Benefits

• Opportunity to establish the company's first dedicated operational security ownership.
• Build an autonomous security operations capability rather than inherit a mature SOC and toolchain.
• Work across the core business, commercial client work, and the Metis Red security testing platform.
• Develop an offshore security resource into first-line detection operations.
• Own measurable improvements in incident response, remediation, resilience, IT service, and audit readiness.