SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Fluidstack is building civilization-scale AI compute infrastructure, acquiring power, designing and operating data centers globally. The company is focused on deploying frontier compute capacity faster than anyone else, with teams spanning hardware and software.
The Security Team is building a comprehensive security program from scratch as the company scales across continents. You will lead incident response end-to-end across corporate, cloud, and data center environments. The threat surface is measured in gigawatts—the model weights training on Fluidstack's infrastructure represent the most valuable and most targeted artifacts in technology today.
Key Responsibilities:
- Lead incident response from detection and containment through eradication and post-incident review across corporate, cloud, and data center environments
- Build detection logic, response playbooks, and forensic tooling designed for protecting high-value AI model weights
- Run investigations across a distributed threat surface, correlating signals from cloud, endpoint, network, and physical systems
- Stand up the incident response function from the ground up, including severity models, on-call rotations, and escalation paths to leadership
- Partner with security and IT teams to turn each incident into permanent improvements by closing identified gaps
- Write clear incident reports and postmortems that drive action from both engineers and executives
The company operates with full autonomy, insane urgency, first-principles reasoning, and a focus on building something that matters. You will own incident response end-to-end with no permission required to operate outside your core role.
Requirements:
- Demonstrated experience personally leading major security incidents from first alert to resolution, making containment decisions under pressure
- Proven track record building detection logic and response playbooks that caught real intrusions
- Experience running digital forensics across cloud, endpoint, and network evidence to reconstruct attacker activity
- Experience standing up or substantially rebuilding an incident response program (not just operating within an existing one)
- Proactive threat hunting experience that found activity missed by existing tooling
- Ability to write incident reports and postmortems clear enough to drive action from both technical and executive audiences
Bonus qualifications: Experience defending high-value targets (AI labs, financial infrastructure, critical infrastructure) against nation-state threat models; cloud-native forensics (AWS, GCP); detection engineering and SIEM/SOAR tooling; malware analysis or reverse engineering.
