Senior DevSecOps Engineer - AI & Cloud Security

Aduna Global; Montreal (administrative region); Hybrid; CAD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid model: 3 days/week in Montreal

Competitive salary and full benefits (

Unlimited paid time off

Job summary

Aduna Global is seeking a Senior Security Engineer in Montreal to implement security controls across platforms and integration estates, while operationalizing governance standards. You’ll work with engineering to scale controls, including AI capabilities, with strong accountability and influence over security decisions.

The role emphasizes risk ownership, cross-team leadership, and hands-on security engineering across cloud, Kubernetes, and CI/CD environments.

Qualifications

• Bachelor's degree in computer science, engineering, cybersecurity, or equivalent experience.
• 8+ years in security engineering, application security, cloud security, or related discipline.
• Proven track record managing security risk and balancing security with engineering velocity.
• Experience driving cross‑team security initiatives end to end.
• Experience with system design, threat modeling, and risk assessment, ideally including AI/ML systems.
• Knowledge of security frameworks (ISO 27001, SOC 2, NIST CSF, OWASP ASVS, CIS Benchmarks) and AI frameworks (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS).
• Knowledge of AI-specific threats (prompt injection, model data poisoning).
• IAM concepts: OAuth 2.0, OIDC, SAML, mTLS, PKI.
• Cloud security on AWS/Azure; Kubernetes security.
• IaC and GitOps tools like Terraform, FluxCD, GitLab CI.

Responsibilities

• Own one or more security risks, including AI/LLM risks, and drive engineering teams to address them.
• Lead cross‑org technical efforts spanning Platform, Integration, SRE, and Product teams.
• Disambiguate and decompose security problems for engineering and product partners.
• Design and implement security controls across application, infrastructure, and AI layers (identity, authentication, authorization, encryption, secret management, model/prompt safety).
• Operate and evolve our secret management platform (HashiCorp Vault) — secrets engines, dynamic credentials, policies, CI/CD and AI toolchains.
• Harden Kubernetes clusters, cloud accounts (AWS, Azure), CI/CD pipelines, and AI runtime environments.
• Build and maintain security tooling for vulnerability management, SAST/DAST, container scanning, IaC policy enforcement, and model/prompt scanning.
• Apply AI to security itself — using LLMs and ML-based tooling to scale triage, code review, threat detection, and evidence collection, with human oversight.
• Translate governance policies and risk decisions into concrete technical controls, automated checks, and developer guidance.
• Support audits and assessments with technical evidence and remediation plans.

Skills

Security engineering

Cloud security

Threat modeling

IAM

Kubernetes security

CI/CD

IaC

HashiCorp Vault

Education

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent experience

Tools

HashiCorp Vault

Terraform

FluxCD

GitLab CI

Kubernetes

Job description

Aduna Global is seeking a Senior Security Engineer in Montreal to implement security controls across platforms and integration estates, while operationalizing governance standards. You’ll work with engineering to scale controls, including AI capabilities, with strong accountability and influence over security decisions.

The role emphasizes risk ownership, cross-team leadership, and hands-on security engineering across cloud, Kubernetes, and CI/CD environments.