DevSecOps – Montréal

At Aduna, we’re building the backbone of the global API economy - connecting telecom operators, cloud platforms, and software innovators to enable the next generation of digital communication services. Aduna’s Security team protects the company, our CSP partners, and the data flowing through our APIs, while enabling engineering to move fast and adopt AI safely. As a Senior Security Engineer, you’ll be an individual contributor accountable for implementing security solutions across Aduna’s platform and integration estate, and for operationalizing the standards, policies, and risk decisions set by Security governance.

You’ll work hands‑on with engineering teams across the company to turn governance into engineered controls that scale - including the controls needed to secure how we build with, and expose, AI capabilities. This role doesn’t include people management, but requires strong accountability, the ability to influence engineers across teams toward the right security decisions, and rigorous attention to standards and telecom security guidelines.

What You’ll Do

• Risk Ownership & Cross-Team Leadership
  • Own one or more security risks at Aduna, including AI/LLM‑related risks, driving engineering teams to address them while enabling the company to move fast.
  • Lead cross‑org technical efforts spanning Platform, Integration, SRE, and Product teams.
  • Disambiguate and decompose security problems, creating clarity for engineering and product partners.
• Security Implementation & Engineered Controls
  • Design and implement security controls across application, infrastructure, and AI layers (identity, authentication, authorization, encryption, secret management, model/prompt safety).
  • Operate and evolve our secret management platform (HashiCorp Vault) — secrets engines, dynamic credentials, policies, and integration with CI/CD and AI/agent toolchains.
  • Harden Kubernetes clusters, cloud accounts (AWS, Azure), CI/CD pipelines, and AI runtime environments.
  • Build and maintain security tooling for vulnerability management, SAST/DAST, container scanning, IaC policy enforcement, and model/prompt scanning.
  • Apply AI to security itself — using LLMs and ML‑based tooling to scale triage, code review, threat detection, and evidence collection, with human oversight.
• Governance & Policy Operationalization
  • Translate governance policies and risk decisions into concrete technical controls, automated checks, and developer guidance, including responsible AI use standards.
  • Support audits and assessments with technical evidence and remediation plans.

What You Bring

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, or equivalent experience.
• 8+ years in security engineering, application security, cloud security, or a related discipline.
• Proven track record managing security risk and balancing security with engineering velocity.
• Experience driving cross‑team security initiatives end to end.
• Experience with system design, threat modeling, and risk assessment, ideally including AI/ML systems.
• Strong knowledge of security frameworks (ISO 27001, SOC 2, NIST CSF, OWASP ASVS, CIS Benchmarks) and growing familiarity with AI‑specific frameworks (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS).
• Knowledge of current threat TTPs, including AI‑specific threats (prompt injection, model/data poisoning, jailbreaks, unsafe autonomous actions).
• Solid IAM knowledge: OAuth 2.0, OIDC, SAML, mTLS, PKI.
• Cloud security experience on AWS and/or Azure (IAM, KMS, network security, logging, posture management).
• Kubernetes security experience (RBAC, network policies, admission control, image signing, runtime security).
• Working knowledge of IaC and GitOps (Terraform, FluxCD, GitLab CI or similar).

Why Join Aduna?

• Impactful Work: Shape platforms millions will rely on.
• Innovative Culture: High ownership, collaboration, and learning.
• Growth & Flexibility: Modern tools and work‑life balance.

Our Offer

• Hybrid model: 3 days/week in the Montreal office.
• Competitive salary and full benefits (dental, medical, RRSP/DPSP).
• Unlimited paid time off.

Aduna is committed to a diverse and inclusive workplace and welcomes applicants from all backgrounds.