Information Security Operations Specialist

About Us:

AltaML is a leading North American applied AI company with extensive experience in building and operationalizing AI software solutions.

We are a company like no other – we believe in making small bets, failing fast, and being better together. We are looking for creative problem-solvers who obsess about the customer to find wins across different industries.

We don’t hire for fit; we hire to add. We are looking for people who play our core values of being: Agile, Gritty Humble, and Happy. If you’re passionate about AI/ML, thrive in a dynamic environment, and want to work with a diverse team of wickedly smart people, we want to hear from you!

About the Role:

As our next Information Security Operations Specialist , you own the daily operational information security activities at AltaML, moving beyond basic checklist execution to deliver measurable security resilience. You will safeguard our corporate and production infrastructure, optimize automated defense networks, and proactively counter sophisticated software supply chain and AI-specific threats.

Required Results

1. 
   

   SOC2 Continuity & Program Expansion
   Maintain the existing SOC2 program with 100% continuous compliance across all controls. Partnering closely with the IT team for execution and infrastructure support, you will successfully plan and implement foundational controls required for future security programs (e.g., ISO27001) as the enterprise scales.
   KPI: Zero major non-conformances during external audits; 100% of compliance evidence is accurate and collected on time.



2. 
   

   AI-Powered Red Teaming
   Plan, configure, and operate our automated AI-powered red team program to independently uncover vulnerabilities before they can be exploited.
   KPI: Successfully execute scheduled automated adversarial simulations, delivering clear technical risk documentation and measurable remediation roadmaps.



3. 
   

   Intelligent Threat Monitoring (SIEM)
   Manage, calibrate, and continuously improve our AI-supported SIEM platform to optimize visibility and protection across environments.
   KPI: Minimize Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) while reducing false-positive alerts by 20% annually through rule tuning.



4. 
   

   Supply Chain & Vulnerability Resilience
   Proactively monitor, triage, and mitigate CVEs, third-party software vulnerabilities, and potential software supply chain attacks.
   KPI: 100% of critical zero-day vulnerabilities are assessed and mapped to definitive threat response plans within established SLA windows.



5. 
   

   Cross-Functional Engineering Security Coordination
   Coordinate security activities and facilitate the seamless integration of detective and protective controls directly within the engineering lifecycle and IT architecture solutions.
   KPI: 90% of development pipeline security review findings are collaboratively triaged and resolved without delaying production deployment.



6. 
   

   Agentic AI Secure Enablement
   Establish and execute a comprehensive security evaluation and governance framework for third-party, off-the-shelf Agentic AI platforms (e.g., Claude Desktop) connecting to AltaML’s systems.
   KPI: 100% of target enterprise AI tools are evaluated against strict data privacy boundaries, session guardrails, and identity controls before access is authorized.

What You'll Do:

Threat Monitoring & Incident Operations (25%)

• 
  

  Manage and improve the AI-supported SIEM, network monitoring tools, and alerting infrastructure.



• 
  

  Respond to operational security incidents, investigate anomalies, and execute vulnerability analysis.

Compliance, Audits & IT Team Collaboration (20%)

• 
  

  Conduct internal security reviews against compliance baselines (SOC2, ISO27001).



• 
  

  Collaborate with the IT administration team to execute controls and ensure system accounts sync correctly across in-scope applications.

Adversarial Simulation & AI Red Teaming (20%)

• 
  

  Operate and tune automated AI-powered red teaming platforms.



• 
  

  Deploy ethical hacking techniques to safely test internal systems, cloud infrastructure, and network boundaries.

Secure Engineering & Architecture Integration (15%)

• 
  

  Work closely with development and architecture teams to design secure infrastructure solutions.



• 
  

  Embed security guardrails into code workflows to catch software supply chain threats early.

Emerging AI Technology Governance (10%)

• 
  

  Evaluate risks associated with new third-party AI agents and desktop integrations.



• 
  

  Define identity controls, data boundaries, and safe configurations for user tool adoption.

Reporting, Policies & Documentation (10%)

• 
  

  Create and maintain controls, policies, SOPs, and technical security guidelines.



• 
  

  Provide senior leadership with clear metrics and reporting on security incidents and posture maturity.

What You Bring:

• 
  

  Experience: 3–5 years of dedicated professional experience in an Information Security operations or engineering capacity (ideally in a fast-paced SaaS, cloud-native, or startup environment).



• 
  

  Compliance Literacy: Practical familiarity with maintaining or supporting a formal security certification program (such as SOC2 or ISO27001).



• 
  

  Technical Domain Knowledge: Good understanding of cloud computing security concepts, modern SIEM setups, firewalls, data encryption, and identity directories.



• 
  

  OS Agility: Hands-on comfort securing and navigating diverse operating systems, specifically MacOS, Linux, and Windows infrastructure.



• 
  

  Education: A related technical degree or diploma in a matching field (e.g., Computer Science, Cybersecurity, Systems & Network Administration) or equivalent deep practical experience.

Responsible AI (RAI)

AltaML employees, contractors, and associates must be trained and well-versed in the importance of Responsible AI and empowered to enact RAI principles by developing and deploying AI solutions. They should also be empowered to raise and escalate RAI concerns as required.

AltaML is responsible for elevating public discourse and awareness of AI through open, transparent communications with the broader public.

Equal Opportunities

AltaML is dedicated to fostering a safe, diverse, and inclusive workplace as an equal-opportunity employer. We welcome applications from qualified individuals of all backgrounds, encompassing ethnicity, religion, disability status, gender identity, sexual orientation, family status, age, nationality, and educational backgrounds. If you are invited for an interview and require accommodations during the interview process, please don’t hesitate to let us know.

AltaML acknowledges that its head office is located on Treaty 6 territory, and respects the histories, languages, and cultures of First Nations, Métis, Inuit, and all First Peoples of Canada, whose presence continues to enrich our vibrant community.

We Look for A-Players Who:

- Express our core values

- Are hungry for knowledge

- Want to learn new skills

- Are respectful

- Collaborate with others across the whole company

- Share knowledge with coworkers

- Educate and promote AI and ML concepts both internally and externally

- Have a high work ethic and are self-motivated

Our Perks:

Uncapped Vacation - For all full time, permanent employees. Seriously, take the time you need - when you need it.

Make an Impact - Witness the impact your work contribution has on the success of our company.

‍ Working with PhD and Master Level Colleagues - Endless conversations around the latest in Machine Learning and Applied AI.

Competitive Benefits - For all full time, permanent employees.

Office as a Resource - Hybrid work environment with state-of-the-art office spaces that ignite collaboration.

⚡ Big Slack Energy - IYKYK.

Our Culture:

You will be working in a high-paced environment focused on creating unique ML solutions to problems across multiple industries to generate impactful value. You will be working at a company with employees who have multiple years of industrial and academic experience in data science, software engineering, product development, and machine learning fields.

You will be able to experience a collaborative company culture, which means we believe in working hard, getting the job done, and enjoying the group social on Fridays. You’ll also get flexibility in where you work, what hours you work, how much vacation you take, and what you wear. We expect hard work but respect work/life balance.

Core Values:

At AltaML, we are driven by our core values. We believe that by embodying these values in everything we do, we will exceed our customer’s expectations while creating a positive and empowering work environment for our team members. We are dedicated to living our values and strive to make them the foundation for our success. 

Gritty - We are entrepreneurial, determined, and resilient, pushing through challenges to achieve our goals.

Agile - We make decisions based on “little bets” creating a safe space to take risks. We embrace an interactive process, allowing ideas to fail quickly or be scaled iteratively. Together, we continuously refine and improve our approach to reach the desired outcome. 

Humble - We listen to data, embrace new ideas, admit limitations and take ownership to solve problems. We constantly push ourselves to improve and excel.

Happy - We ignite passion and purpose by fostering a dynamic work environment. We encourage tap dancing to work, common sense over rules, empowering team members to find joy in their contributions, and being your authentic self.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.