Information Security Operations Specialist

AltaML • Edmonton, AB

3d • Hybrid

About The Position

As our next Information Security Operations Specialist, you own the daily operational information security activities at AltaML, moving beyond basic checklist execution to deliver measurable security resilience. You will safeguard our corporate and production infrastructure, optimize automated defense networks, and proactively counter sophisticated software supply chain and AI-specific threats.

Requirements

• 3–5 years of dedicated professional experience in an Information Security operations or engineering capacity (ideally in a fast-paced SaaS, cloud-native, or startup environment).
• Practical familiarity with maintaining or supporting a formal security certification program (such as SOC2 or ISO27001).
• Good understanding of cloud computing security concepts, modern SIEM setups, firewalls, data encryption, and identity directories.
• Hands-on comfort securing and navigating diverse operating systems, specifically MacOS, Linux, and Windows infrastructure.
• A related technical degree or diploma in a matching field (e.g., Computer Science, Cybersecurity, Systems & Network Administration) or equivalent deep practical experience.
• Employees, contractors, and associates must be trained and well-versed in the importance of Responsible AI and empowered to enact RAI principles by developing and deploying AI solutions.
• Should also be empowered to raise and escalate RAI concerns as required.

Responsibilities

• Maintain the existing SOC2 program with 100% continuous compliance across all controls.
• Plan and implement foundational controls required for future security programs (e.g., ISO27001) as the enterprise scales.
• Plan, configure, and operate our automated AI-powered red team program to independently uncover vulnerabilities before they can be exploited.
• Manage, calibrate, and continuously improve our AI-supported SIEM platform to optimize visibility and protection across environments.
• Proactively monitor, triage, and mitigate CVEs, third-party software vulnerabilities, and potential software supply chain attacks.
• Coordinate security activities and facilitate the seamless integration of detective and protective controls directly within the engineering lifecycle and IT architecture solutions.
• Establish and execute a comprehensive security evaluation and governance framework for third-party, off-the-shelf Agentic AI platforms (e.g., Claude Desktop) connecting to AltaML’s systems.
• Manage and improve the AI-supported SIEM, network monitoring tools, and alerting infrastructure.
• Respond to operational security incidents, investigate anomalies, and execute vulnerability analysis.
• Conduct internal security reviews against compliance baselines (SOC2, ISO27001).
• Collaborate with the IT administration team to execute controls and ensure system accounts sync correctly across in-scope applications.
• Operate and tune automated AI-powered red teaming platforms.
• Deploy ethical hacking techniques to safely test internal systems, cloud infrastructure, and network boundaries.
• Work closely with development and architecture teams to design secure infrastructure solutions.
• Embed security guardrails into code workflows to catch software supply chain threats early.
• Evaluate risks associated with new third-party AI agents and desktop integrations.
• Define identity controls, data boundaries, and safe configurations for user tool adoption.
• Create and maintain controls, policies, SOPs, and technical security guidelines.
• Provide senior leadership with clear metrics and reporting on security incidents and posture maturity.

Benefits

• Uncapped Vacation
• Make an Impact
• Working with PhD and Master Level Colleagues
• Competitive Benefits
• Office as a Resource
• Hybrid work environment with state-of-the-art office spaces that ignite collaboration.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree