Platform Security Operations Lead (CSIRT)

Firmus; Sydney; On-site; AUD 180,000 - 260,000; Full time

Job summary

Firmus seeks a Platform Security Operations Manager to lead the CSIRT across Asia-Pacific operations and oversee 24/7 incident response for AI FactoryOS, Firmus AI Cloud, and tenant workloads. You will drive runtime security, pipeline gates, and multi-tenant Kubernetes controls while coordinating with cyber security leadership.

The role requires hands-on security leadership, incident response planning, and strong communication under pressure across regions.

Qualifications

• Lead CSIRT in a 24/7 production environment with incident response playbooks and exercises.
• Hands-on security background in large-scale on-prem and self-hosted infra across Linux, Kubernetes, and network security.
• Experience operating controls under ISO 27001, SOC 2 or NIST frameworks with audit evidence.
• Ability to brief leadership under pressure and make containment calls with limited data.
• Experience with security monitoring and case management tools (SIEM, Falco, Tetragon, Jira/ServiceNow).

Responsibilities

• Lead and manage the Platform Security team across regions.
• Oversee the CSIRT and 24/7 on-call roster to ensure readiness.
• Own the incident response plan, playbooks and quarterly exercises.
• Lead live incident response: triage, containment, eradication and recovery.
• Develop and exercise incident playbooks for main threat scenarios.
• Manage evidence handling and chain of custody during incidents.
• Coordinate with Cyber Security and external forensics when needed.
• Drive post-incident reviews and fixes via problem management.
• Monitor vulnerabilities in GPU, Kubernetes, identity stack; set priorities with teams.

Skills

CSIRT leadership

Incident response planning

Linux/Kubernetes security

ISO27001/SOC2/NIST

Clear communication under pressure

Security monitoring tools

Education

Bachelor in CS/Engineering

Tools

SIEM platforms

Falco

Tetragon

Jira Service Management/ServiceNow

Job description

Firmus seeks a Platform Security Operations Manager to lead the CSIRT across Asia-Pacific operations and oversee 24/7 incident response for AI FactoryOS, Firmus AI Cloud, and tenant workloads. You will drive runtime security, pipeline gates, and multi-tenant Kubernetes controls while coordinating with cyber security leadership.

The role requires hands-on security leadership, incident response planning, and strong communication under pressure across regions.