# DevSecOps – MTL / DevSecOps – Montréal at Adunaglobal

> Own security risks across Aduna's platform, implementing engineered controls and driving cross-team security initiatives.

- Company: Adunaglobal (adunaglobal.com)
- Location: Montreal
- Places: Montreal, Canada
- Posted: 2026-09-04
- Level: Senior
- Team: Security
- Apply: https://jobs.lever.co/adunaglobal/321141e1-3ff7-4fe8-b5b9-3ee92be4bce6
- Page: https://ye.saranatour.dev/jobs/devsecops-mtl-devsecops-montreal-adunaglobal-kn73a836288narspqdfe54xyx18hemrv

## The posting

DevSecOps – MTL / DevSecOps – Montréal
Adunaglobal · Montreal

**All Together, Extraordinary**

[www.adunaglobal.com](http://www.adunaglobal.com)

At Aduna, we're building the backbone of the global API economy - connecting telecom operators, cloud platforms, and software innovators to enable the next generation of digital communication services.

Aduna's Security team protects the company, our CSP partners, and the data flowing through our APIs, while enabling engineering to move fast and adopt AI safely. As a Senior Security Engineer, you'll be an individual contributor accountable for implementing security solutions across Aduna's platform and integration estate, and for operationalizing the standards, policies, and risk decisions set by Security governance.

You'll work hands-on with engineering teams across the company to turn governance into engineered controls that scale - including the controls needed to secure how we build with, and expose, AI capabilities. This role doesn't include people management, but requires strong accountability, the ability to influence engineers across teams toward the right security decisions, and rigorous attention to standards and telecom security guidelines.

## What You'll Do

**_Risk Ownership & Cross-Team Leadership_**

- Own one or more security risks at Aduna, including AI/LLM-related risks, driving engineering teams to address them while enabling the company to move fast
- Lead cross-org technical efforts spanning Platform, Integration, SRE, and Product teams
- Disambiguate and decompose security problems, creating clarity for engineering and product partners

**_Security Implementation & Engineered Controls_**

- Design and implement security controls across application, infrastructure, and AI layers (identity, authentication, authorization, encryption, secret management, model/prompt safety)
- Operate and evolve our secret management platform (HashiCorp Vault) — secrets engines, dynamic credentials, policies, and integration with CI/CD and AI/agent toolchains
- Harden Kubernetes clusters, cloud accounts (AWS, Azure), CI/CD pipelines, and AI runtime environments
- Build and maintain security tooling for vulnerability management, SAST/DAST, container scanning, IaC policy enforcement, and model/prompt scanning
- Apply AI to security itself — using LLMs and ML-based tooling to scale triage, code review, threat detection, and evidence collection, with human oversight

**_Governance & Policy Operationalization_**

- Translate governance policies and risk decisions into concrete technical controls, automated checks, and developer guidance, including responsible AI use standards
- Support audits and assessments with technical evidence and remediation plans

## What You Bring

- Bachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent experience
- 8+ years in security engineering, application security, cloud security, or a related discipline
- Proven track record managing security risk and balancing security with engineering velocity
- Experience driving cross-team security initiatives end to end
- Experience with system design, threat modeling, and risk assessment, ideally including AI/ML systems
- Strong knowledge of security frameworks (ISO 27001, SOC 2, NIST CSF, OWASP ASVS, CIS Benchmarks) and growing familiarity with AI-specific frameworks (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS)
- Knowledge of current threat TTPs, including AI-specific threats (prompt injection, mo