DevSecOps Engineer

Risk Ownership and Cross-Team Leadership

• Operate with ownership and accountability for one or more security risks at Aduna, including risks introduced by AI and LLM-based features, driving and influencing engineering teams to comprehensively address those risks while enabling the company to move fast.

• Lead cross-organizational technical efforts to solve challenging security problems that span the Platform, Integration, SRE, and Product teams.

• Disambiguate and decompose security problems and solutions, and create clarity for engineering and product partners.

Security Implementation and Engineered Controls

• Design and implement security controls across application, infrastructure, and AI layers, including identity, authentication, authorization, encryption, secret management, and model and prompt safety controls.

• Operate and evolve Aduna's secret management platform built on HashiCorp Vault, including secrets engines, dynamic credentials, policies, namespaces, and integration with workloads, CI/CD, and AI/agent toolchains.

• Harden Kubernetes clusters, cloud accounts (AWS, Azure), CI/CD pipelines, and AI runtime environments against internal standards and industry best practices.

• Build and maintain security tooling and automation for vulnerability management, dependency scanning, SAST/DAST, container and image scanning, infrastructure-as-code policy enforcement, and emerging categories such as model and prompt scanning.

• Apply AI to security itself: use LLMs, agents, and ML-based tooling to scale triage, code review, threat detection, and evidence collection, with appropriate human oversight.

Governance and Policy Operationalization

• Translate policies, standards, and risk decisions issued by the Security governance function into concrete technical controls, automated checks, and developer-facing guidance, including standards for the responsible and ethical use of AI.

• Support audits and assessments by providing technical evidence, walkthroughs, and remediation plans.