24/7 Platform Security Operations Lead (CSIRT)

Firmus Technologies Pty Ltd.; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

Firmus Technologies Pty Ltd. seeks a Platform Security Operations Manager to lead the Platform Security team, own the CSIRT’s 24/7 readiness, and drive security governance across AI FactoryOS and Firmus AI Cloud.

You will coordinate incident response, runbooks, and post-incident reviews in a fast-paced, multi-site environment. The role requires hands-on security leadership for on-prem and Kubernetes workloads, with escalation to operations and engineering leadership as incidents occur.

Qualifications

• Significant experience leading a CSIRT in a 24/7 production environment and directing incident response.
• Hands-on security background in large-scale on-premises infrastructure with Kubernetes, Linux and network security.
• Experience operating under ISO 27001, SOC 2 or NIST frameworks and producing audit evidence.
• Clear communication under pressure and decisive incident containment decisions.
• Experience with security monitoring and case management tooling (SIEM, eBPF, Jira/ServiceNow).

Responsibilities

• Lead Platform Security team, including hiring, onboarding and wellbeing across regions.
• Oversee CSIRT and 24/7 security on-call roster.
• Manage incident response plan, playbooks and exercises.
• Lead live incident response with containment and recovery.
• Develop and maintain security playbooks for top threat scenarios.
• Coordinate with Cyber Security and Operations leadership during incidents.
• Drive post-incident reviews and implement fixes with engineering backlog.

Skills

CSIRT leadership

Kubernetes security

Linux security

Compliance frameworks

Threat monitoring tools

Education

Bachelor's degree or equivalent

Tools

SIEM tools

eBPF runtimes

Jira Service Management

ServiceNow

Job description

Firmus Technologies Pty Ltd. seeks a Platform Security Operations Manager to lead the Platform Security team, own the CSIRT’s 24/7 readiness, and drive security governance across AI FactoryOS and Firmus AI Cloud.

You will coordinate incident response, runbooks, and post-incident reviews in a fast-paced, multi-site environment. The role requires hands-on security leadership for on-prem and Kubernetes workloads, with escalation to operations and engineering leadership as incidents occur.