Information Security Operations Specialist

About Us:

AltaML is a leading North American applied AI company with extensive experience in building and operationalizing AI software solutions.

We are a company like no other – we believe in making small bets, failing fast, and being better together. We are looking for creative problem-solvers who obsess about the customer to find wins across different industries.

We don’t hire for fit; we hire to add. We are looking for people who play our core values of being: Agile, Gritty Humble, and Happy. If you’re passionate about AI/ML, thrive in a dynamic environment, and want to work with a diverse team of wickedly smart people, we want to hear from you!

About the Role:

As our next Information Security Operations Specialist , you own the daily operational information security activities at AltaML, moving beyond basic checklist execution to deliver measurable security resilience. You will safeguard our corporate and production infrastructure, optimize automated defense networks, and proactively counter sophisticated software supply chain and AI-specific threats.

Required Results

1. SOC2 Continuity & Program Expansion
   Maintain the existing SOC2 program with 100% continuous compliance across all controls. Partnering closely with the IT team for execution and infrastructure support, you will successfully plan and implement foundational controls required for future security programs (e.g., ISO27001) as the enterprise scales.
   KPI: Zero major non-conformances during external audits; 100% of compliance evidence is accurate and collected on time.

2. AI-Powered Red Teaming
   Plan, configure, and operate our automated AI-powered red team program to independently uncover vulnerabilities before they can be exploited.
   KPI: Successfully execute scheduled automated adversarial simulations, delivering clear technical risk documentation and measurable remediation roadmaps.

3. Intelligent Threat Monitoring (SIEM)
   Manage, calibrate, and continuously improve our AI-supported SIEM platform to optimize visibility and protection across environments.
   KPI: Minimize Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) while reducing false-positive alerts by 20% annually through rule tuning.

4. Supply Chain & Vulnerability Resilience
   Proactively monitor, triage, and mitigate CVEs, third-party software vulnerabilities, and potential software supply chain attacks.
   KPI: 100% of critical zero-day vulnerabilities are assessed and mapped to definitive threat response plans within established SLA windows.

5. Cross-Functional Engineering Security Coordination
   Coordinate security activities and facilitate the seamless integration of detective and protective controls directly within the engineering lifecycle and IT architecture solutions.
   KPI: 90% of development pipeline security review findings are collaboratively triaged and resolved without delaying production deployment.

6. Agentic AI Secure Enablement
   Establish and execute a comprehensive security evaluation and governance framework for third-party, off-the-shelf Agentic AI platforms (e.g., Claude Desktop) connecting to AltaML’s systems.
   KPI: 100% of target enterprise AI tools are evaluated against strict data privacy boundaries, session guardrails, and identity controls before access is authorized.