Platform Security Operations Manager — PART_TIME
Lead a mission-critical security team defending a large-scale AI infrastructure against emerging threats.
Key Responsibilities
- Lead and manage the Platform Security team, including hiring, onboarding, performance, development and wellbeing across regions.
- Manage the AI Factory's CSIRT and its 24/7 security on-call roster, so the team is ready to respond at any hour.
- Manage the AI Factory security incident response plan: severity classification aligned to the function's severity model, and clear escalation paths from the operations and engineering teams.
- Lead the security response during live incidents: direct triage, containment, eradication and recovery, and keep the incident commander and leadership informed with clear and accurate security assessments.
- Manage the security incident playbooks for the AI Factory's main threat scenarios, and run regular exercises and tabletop tests with the incident commanders, the engineering teams and operations leadership.
- Manage evidence handling and chain of custody for security incidents, work with Cyber Security leadership to bring in external forensics support when needed, and keep Cyber Security and Operations leadership supplied with the facts, timeline and recommendations they need during and after an incident.
- Lead security post-incident reviews and drive the resulting fixes to closure through problem management and the engineering backlogs, and work with vendor security teams on faults and vulnerabilities in the products the AI Factory uses.
- Track vulnerabilities and threat intelligence relevant to GPU infrastructure, Kubernetes, the identity stack and the products and vendors the AI Factory uses, assess what the AI Factory must act on, and agree priorities and timeframes with the teams that apply the fix.
- Manage the operational security standard the team delivers for the AI Factory: runtime detection and enforcement, the security gates in the delivery pipeline, the admission, workload identity and network policy content of the multi-tenant Kubernetes estate, and the security acceptance requirements a release has to meet.
- Manage the security exception process and register, with owners, time limits and compensating controls, and manage the independent monitoring of privileged activity across the estate, keeping the separation between the team that builds access and the team that monitors it.
- Provide the security evidence the team's controls produce for audit and customer due diligence, and turn findings from incidents and testing into clear engineering requirements for the platform and infrastructure teams.
- Keep the team's detection, evidence, forensics and incident response tooling fit for purpose, and keep detection coverage growing with the AI Factory.
Job Requirements
- You possess significant professional experience in security operations and incident response leadership.
- You have demonstrated expertise in managing security for large-scale Kubernetes environments and cloud-native infrastructure.
- You hold relevant professional certifications in cybersecurity or information security management.
- You demonstrate strong leadership abilities to manage remote and cross-functional teams in high-pressure environments.
- You have excellent communication skills to provide clear security assessments to executive leadership.
Job Details
What's on Offer
