{"id":1537286,"url":"https://alion.io/job/aduna-global-devsecops-mtl-devsecops-montreal","title":"DevSecOps – MTL / DevSecOps – Montréal","company":{"id":2014758,"name":"Aduna Global","domain":"adunaglobal.com","url":"https://alion.io/company/adunaglobal","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Montreal, Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":89000,"max_usd":205000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":50},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"FluxCD","optional":false},{"name":"GitLab CI","optional":false},{"name":"GitOps","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"NIST AI RMF","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"PKI","optional":false},{"name":"SOC 2","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-09-04T15:26:38Z","employer_posted_date":"2026-09-04","last_verified_at":"2026-09-30T19:25:58Z","board_verified":true,"closed_at":null,"days_open":26,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":26},"description":"All Together, Extraordinary\nwww.adunaglobal.com\nAt Aduna, we're building the backbone of the global API economy - connecting telecom operators, cloud platforms, and software innovators to enable the next generation of digital communication services.\nAduna's Security team protects the company, our CSP partners, and the data flowing through our APIs, while enabling engineering to move fast and adopt AI safely. As a Senior Security Engineer, you'll be an individual contributor accountable for implementing security solutions across Aduna's platform and integration estate, and for operationalizing the standards, policies, and risk decisions set by Security governance.\nYou'll work hands-on with engineering teams across the company to turn governance into engineered controls that scale - including the controls needed to secure how we build with, and expose, AI capabilities. This role doesn't include people management, but requires strong accountability, the ability to influence engineers across teams toward the right security decisions, and rigorous attention to standards and telecom security guidelines.\nWhat You'll Do\nRisk Ownership & Cross-Team Leadership\nOwn one or more security risks at Aduna, including AI/LLM-related risks, driving engineering teams to address them while enabling the company to move fast\nLead cross-org technical efforts spanning Platform, Integration, SRE, and Product teams\nDisambiguate and decompose security problems, creating clarity for engineering and product partners\nSecurity Implementation & Engineered Controls\nDesign and implement security controls across application, infrastructure, and AI layers (identity, authentication, authorization, encryption, secret management, model/prompt safety)\nOperate and evolve our secret management platform (HashiCorp Vault) - secrets engines, dynamic credentials, policies, and integration with CI/CD and AI/agent toolchains\nHarden Kubernetes clusters, cloud accounts (AWS, Azure), CI/CD pipelines, and AI runtime environments\nBuild and maintain security tooling for vulnerability management, SAST/DAST, container scanning, IaC policy enforcement, and model/prompt scanning\nApply AI to security itself - using LLMs and ML-based tooling to scale triage, code review, threat detection, and evidence collection, with human oversight\nGovernance & Policy Operationalization\nTranslate governance policies and risk decisions into concrete technical controls, automated checks, and developer guidance, including responsible AI use standards\nSupport audits and assessments with technical evidence and remediation plans\nWhat You Bring\nBachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent experience\n8+ years in security engineering, application security, cloud security, or a related discipline\nProven track record managing security risk and balancing security with engineering velocity\nExperience driving cross-team security initiatives end to end\nExperience with system design, threat modeling, and risk assessment, ideally including AI/ML systems\nStrong knowledge of security frameworks (ISO 27001, SOC 2, NIST CSF, OWASP ASVS, CIS Benchmarks) and growing familiarity with AI-specific frameworks (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS)\nKnowledge of current threat TTPs, including AI-specific threats (prompt injection, model/data poisoning, jailbreaks, unsafe autonomous actions)\nSolid IAM knowledge: OAuth 2.0, OIDC, SAML, mTLS, PKI\nCloud security experience on AWS and/or Azure (IAM, KMS, network security, logging, posture management)\nKubernetes security experience (RBAC, network policies, admission control, image signing, runtime security)\nWorking knowledge of IaC and GitOps (Terraform, FluxCD, GitLab CI or similar\nWhy Join Aduna?\nImpactful Work: Shape platforms millions will rely on\nInnovative Culture: High ownership, collaboration, and learning\n Growth & Flexibility: Modern tools and work-life balance\nOur Offer\nHybrid model: 3 days/week in the Montreal office\nCompetitive salary and full benefits (dental, medical, RRSP/DPSP)\nUnlimited paid time off\nBy applying, you consent to the processing of your personal data for recruitment purposes.\nPrivacy notice: https://www.adunaglobal.com/privacy-notice/\nAduna is committed to a diverse and inclusive workplace and welcomes applicants from all backgrounds.\n--------------------------------\nTous ensemble, extraordinaires\nChez Aduna, nous construisons l'infrastructure de l'économie mondiale des API en reliant les opérateurs de télécommunications, les plateformes infonuagiques et les innovateurs du secteur logiciel afin de permettre la prochaine génération de services de communication numérique.\nL'équipe Sécurité d'Aduna protège l'entreprise, nos partenaires CSP et les données qui transitent par nos API, tout en permettant à l'ingénierie d'avancer rapidement et d'adopter l'IA de façon sécuritaire. À titre d'ingénieur(e) principal(e) en sécurité, vous serez contributeur ou contributrice individuel(le), responsable de mettre en œuvre des solutions de sécurité dans les plateformes et environnements d'intégration d'Aduna, et d'opérationnaliser les normes et décisions de la gouvernance de la sécurité.\nVous travaillerez en collaboration avec les équipes d'ingénierie afin de transformer la gouvernance en contrôles techniques évolutifs - y compris ceux nécessaires pour sécuriser la façon dont nous développons et exposons des capacités d'IA. Ce rôle ne comporte pas de gestion de personnel, mais exige un grand sens des responsabilités, la capacité d'influencer les ingénieurs de différentes équipes, et une attention rigoureuse aux normes de sécurité des télécommunications.\nCe que vous ferez\nResponsabilité des risques et leadership interéquipes\nAssumer la responsabilité d'un ou plusieurs risques de sécurité, y compris ceux liés à l'IA/LLM, en mobilisant les équipes d'ingénierie\nDiriger des initiatives techniques transversales touchant les équipes Plateforme, Intégration, SRE et Produit\nClarifier et décomposer les problèmes de sécurité pour les partenaires en ingénierie et en produit\nMise en œuvre de la sécurité et contrôles techniques\nConcevoir et mettre en œuvre des contrôles de sécurité (identité, authentification, autorisation, chiffrement, gestion des secrets, sécurité des modèles/requêtes)\nExploiter et faire évoluer la plateforme de gestion des secrets (HashiCorp Vault)\nRenforcer les clusters Kubernetes, les comptes infonuagiques (AWS, Azure), les pipelines CI/CD et les environnements d'IA\nDévelopper des outils de sécurité pour la gestion des vulnérabilités, SAST/DAST, l'analyse des conteneurs et des politiques IaC\nAppliquer l'IA à la sécurité elle-même (triage, revue de code, détection des menaces) avec supervision humaine\nGouvernance et opérationnalisation des politiques\nTraduire les politiques de gouvernance en contrôles techniques concrets et directives pour développeurs\nSoutenir les audits avec des preuves techniques et plans de remédiation\nCe que vous apportez\nBaccalauréat en informatique, génie, cybersécurité ou expérience équivalente\n8+ ans d'expérience en sécurité applicative, infonuagique ou discipline connexe\nExpérience démontrée en gestion des risques et équilibre sécurité/vélocité d'ingénierie\nExpérience en conception de systèmes, modélisation des menaces, idéalement avec des systèmes IA/ML\nConnaissance des cadres de sécurité (ISO 27001, SOC 2, NIST CSF, OWASP ASVS) et cadres IA (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS)\nConnaissance des menaces actuelles, y compris propres à l'IA (injection de requêtes, empoisonnement de modèles, jailbreaks)\nConnaissance de la gestion des identités (OAuth 2.0, OIDC, SAML, mTLS, PKI)\nExpérience en sécurité infonuagique AWS/Azure et sécurité Kubernetes\nConnaissance pratique de l'infrastructure en tant que code (Terraform, FluxCD, GitLab CI)\nPourquoi rejoindre Aduna?\nTravail à fort impact sur des plateformes utilisées par des millions de personnes\nCulture d'innovation, collaboration et apprentissage\nCroissance, outils modernes et équilibre travail-vie personnelle\nCe que nous offrons\nModèle hybride: 3 jours/semaine au bureau de Montréal\n Salaire concurrentiel et avantages sociaux complets (dentaire, médical, REER/RPDB)\nCongés payés illimités\nEn soumettant votre candidature, vous consentez au traitement de vos renseignements personnels à des fins de recrutement.\nAvis de confidentialité : https://www.adunaglobal.com/privacy-notice/\nAduna s'engage à offrir un milieu de travail diversifié et inclusif et accueille les candidatures de personnes de tous horizons.","description_format":"text","description_chars":8544,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Canada","iso":"CA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Telecommunications","Cloud Platforms (IaaS & PaaS)","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-09-30T19:25:58Z"}],"liveness":{"score":35,"band":"fade","label":"Fading","p_open":1,"p_active":0.635,"p_room":0.55,"age_days":26,"expected_fill_days":24,"reasons":["conf:10","win:tail"],"computed_at":"2026-10-01T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/aduna-global-devsecops-mtl-devsecops-montreal","json_url":"https://alion.io/job/aduna-global-devsecops-mtl-devsecops-montreal.json","meta":{"generated_at":"2026-10-01T12:48:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":4285,"day_limit":5000,"remaining_today":715,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}