{"id":1082746,"url":"https://alion.io/job/firmus-technologies-senior-platform-security-engineer","title":"Senior Platform Security Engineer","company":{"id":63306,"name":"Firmus Technologies","domain":"firmus.ai","url":"https://alion.io/company/firmus-technologies","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":198000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"Cilium","optional":false},{"name":"Cilium Tetragon","optional":false},{"name":"eBPF","optional":false},{"name":"Falco","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"HPC","optional":true}],"status":"live","first_seen_at":"2026-09-21T03:14:39Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-11-07T19:43:40Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"AI FactoryOSOperations \nAI FactoryOSis Firmus' proprietary operating system for the AI Factory. It governs GPU telemetry, cooling, powerand grid interaction as one integrated layer, so that every Firmus site can be optimisedand monitoredas a single system. \nAI FactoryOS Operations runs that platform in production and owns the 24/7 reliability of AI FactoryOS, Firmus AI Cloud and the platforms built on them, together with the service levels the estate is measured against. \nThe remit is an engineering one. The function builds the guarded automation, remediation and operational tooling that turn manual response into a software-defined capability, andbuilds and operatesthe shared services the estate's own operation depends on. The function works closely with the engineering teams that build the platform, supplying the production evidence that shapes what they fix and what they build next. \nSenior Platform Security Engineer \nRole Summary \nFirmus runs large-scale, state-of-the-artAI infrastructure built on the latest generation of GPU rack-scale systems and operatedas one estate to power the next generation of AI innovation. The Senior Platform Security Engineer owns the operational security of that platform. The multi-tenant Kubernetes estate sits at its heart: production access, admission policy, workload identityand network policy in the live estate, andthe operational security controls that keep it defensible as it grows. \nThis is a hands-on senior role with deep technical expertise. This role owns security in production: the technical response to security incidents on the function's 24/7 security on-call roster, runtime visibilityand enforcement built with modern eBPF-based tooling, the security acceptance requirements a release has to meet before it is authorised, the authority to grant or refuse a security exception, and the deepest technical escalation for security-related platform faults. \nKey Responsibilities \nLead the technical response to security incidents across the estate as part of the 24/7 security on-call roster: triage alerts and reports escalated from first response, distinguish a security signal from an ordinary operational symptom, contain the threat, remove the cause and recover affected services, working under the incident commander, who holds the incident record, communications and customer commitment. \nPreserve and handle evidence during security incidents, including logs, host and container captures and access records, with a recorded chain of custody, so that findings stand up to customer, legal and regulatory scrutiny, and provide the technical input to any customer, contractual or regulatory notification made by the accountable leaders. \nOwn the security incident playbooks for the estate's main threat scenarios (for example credential or key compromise, a breach of tenant isolation, a malicious or compromised workload, and software supply-chain compromise), keep them executable by any engineer on the roster, and test them through regular exercises with the incident commanders and the wider function. \nBuild runtime visibility and enforcement using eBPF-based tooling (for example Cilium, Falco or Tetragon), feeding high-quality signal into the estate's security monitoring, tune detection so that alerts stay actionable as the estate grows, and turn repeat findings into guarded automated response where it is safe to do so. \nOwn the security gates in the delivery pipeline: image signing, software bills of materials, vulnerability gating and policy checks, and maintain the policy-as-code controls that govern what ships to production, running on the delivery toolchain operated by Shared Services Operations. \nSet and own the security content of the multi-tenant Kubernetes estate: admission policy, workload identityand network policy, and verify that what runs in production matches it. \nSet the operational security standard the platform's Kubernetes control planes and baselines must meet in production, validateagainst it continuously, and raise deviations as engineering requirements to the AI Infrastructure team. \nValidate the layered controls that limit the blast radius of a fault or compromise across tenant boundaries, test them against realistic failure and attack paths, and feed the findings to AI Infrastructure where the control belongs to the product. \nOperatethe platform's security controls in line with ISO 27001 and NIST frameworks, applying deep expertisein securing large-scale GPU infrastructure, and produce the security evidencethose controls generate for collation by the Service Delivery Manager. \nProvide the deepest technical expertisefor security-related platform faults, lead post-incident review for security incidentsand drive the resulting fixes to closure through the problem record, and mentor engineers across the function on secure design, runtime securityand incident response practice. \nProvide independent monitoring of privileged activity across the estate, including on the identity, certificateand secrets platforms, using the access mechanisms built by the Principal Platform Identity Engineer. \nSkills & Experience \nRequired Skills \nStrong experienceof privileged access security, including least-privilege design, secrets management, and the auditing of privileged operations in production environments. \nStrong experience securing multi-tenant Kubernetes environments, including admission policy, workload identity, network policyand control plane hardening. \nExtensive experience with eBPF-based runtime security tooling (for example Cilium, Falcoor Tetragon), including building detection and enforcement that feeds a security monitoring platform. \nStrong DevSecOpsexperience owning security gates in a delivery pipeline: image signing, software bills of materials, vulnerability gatingand policy checks. \nSolid understanding of hardware-enforced or network-based tenant isolation, and how it interacts with Kubernetes-level policy. \nExperience with policy-as-code tooling for Kubernetes and delivery pipelines. \nDemonstrated experience as a senior escalation point for security-related faults in a 24/7 production environment, including post-incident review. \nPractical incident investigation skills on Linux and Kubernetes, including analysing logs, process and network activity, and container and host artefacts to work out what happened and how far it spread. \nStrong scripting or programming ability for security automation and tooling (for example Python, Go or Bash). \nClear technical judgement and communication, with the ability to translate security findings and standards for engineering teams and leadership. \nPreferred Experience \nExperience securing GPU or HPC infrastructure and multi-tenant AI workloads. \nExperience in a multi-tenant service provider, cloudor colocation environment. \nExperiencewith workload identity and secrets management patterns, and how runtime enforcement ties back to them. \nExperience with security frameworks and evidence production under ISO 27001, SOC 2or NIST frameworks. \nExperience with incident response frameworks and practice, such as NIST SP 800-61, and with running incident response exercises or tabletop tests. \nExperience with digital forensics and incident response tooling for Linux, cloudand container environments. \nRelevant security certification (for example GCIH, GCFA, OSCP,or a Kubernetes security credential). \nA Bachelor's degree in computer science, engineering or a related discipline, or an equivalent combination of relevant experience and training. \nExpected Outcomes \nSecurity incidents contained and resolved within the targets set by the severity model, with evidence preserved, the incident record complete, and post-incident actions closed by their agreed dates. \nSecurity incident playbooks in place for the main threat scenarios, exercised on a regular schedule, and executable by any engineer on the security roster. \nRuntime detection covering the estate, with an alert set that stays actionable as the estate grows. \nEvery production release meeting the security acceptance requirements, with exceptions owned, time-bound, compensating-controlled and on the register. \nThe operational security standard for Kubernetes validated continuously in production rather than asserted at design time. \nBlast radius controls tested against realistic failure and attack paths, with findings closed or evidenced to the platform engineering teams. \nSecurity evidence produced through normal operation rather than assembled before an audit. \n\nLocation & Reporting \nLocation: Based in Australia or Singapore, with travel to Australian AI Factory sites as required. \nOn-call: The function runs 24/7. First line monitoring and first response sit with the operations centre. This role shares the 24/7 security on-call roster with the other Senior Platform Security Engineers, andworks under the duty incident commander during major security incidents. \nReporting to: Reportsto the Head of AI FactoryOSOperations while the function is being established, working under broad direction with a high degree of autonomy and direct access to the decision makers. As the function reaches its planned structure, the role will report to the Platform Security Operations Manager, with the Head of AI FactoryOSOperations remainingaccountable for the function. The scope, level and remit of the role do not change under either arrangement. \nEmployment Basis \nFull-time \nDiversity \nAt Firmus, we are committed to building a diverse and inclusive workplace. We encourage applications \nfrom candidates of all backgrounds who are passionate about creating a more sustainable future \nthrough innovative engineering solutions. \nJoin us in our mission to revolutionize the AI industry through sustainable practices and \ncutting-edge engineering. Apply now to be part of shaping the future of sustainable AI infrastructure.","description_format":"text","description_chars":9901,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Australia","iso":"AU","kind":"country"},{"name":"Singapore","iso":"SG","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Data Centers & Colocation","Cloud Platforms (IaaS & PaaS)","AI Compute & Inference"],"lifecycle":[{"event":"open","at":"2026-09-21T04:06:10Z"}],"visa":[],"liveness":{"score":64,"band":"ok","label":"Likely open","p_open":1,"p_active":0.857,"p_room":0.75,"age_days":47,"expected_fill_days":67,"reasons":["conf:2","velocity","win:late"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/firmus-technologies-senior-platform-security-engineer","json_url":"https://alion.io/job/firmus-technologies-senior-platform-security-engineer.json","meta":{"generated_at":"2026-11-07T23:09:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":38444,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":63306},"rest":"https://alion.io/mcp/rest/get_company?id=63306"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffirmus-technologies-senior-platform-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffirmus-technologies-senior-platform-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffirmus-technologies-senior-platform-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/firmus-technologies-senior-platform-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffirmus-technologies-senior-platform-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1082746}},{"tool":"search_jobs","arguments":{"company":"firmus.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1082746},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}