Aduna Global

Sells developers access to mobile network features

DevSecOps Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeŁódź, PolandNo salary listed

About the Job

Requirements

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience.
At least 8 years of experience in security engineering, application security, cloud security, or a closely related discipline.
A proven track record of managing security risk and navigating the tradeoff between security and friction in an engineering organization.
Experience driving cross-team engineering and security initiatives end to end.
Experience with system design, threat modeling, and risk assessment, ideally including AI- or ML-enabled systems.
Strong working knowledge of security standards and frameworks, including ISO 27001, SOC 2, NIST CSF, OWASP ASVS, and CIS Benchmarks.
Knowledge of current threat tactics, techniques, and procedures, including prompt injection, model and data poisoning, jailbreaks, and unsafe autonomous actions.
Solid knowledge of identity and access management, including OAuth 2.0, OIDC, SAML, mutual TLS, and public key infrastructure.
Experience with cloud security on AWS and/or Azure, including identity and access management, key management service, network security, logging, and posture management.
Experience with Kubernetes security, including role-based access control, network policies, admission control, image signing, and runtime security.
Working knowledge of infrastructure as code and GitOps, including Terraform, FluxCD, GitLab CI or similar, and embedding security controls into them.

Responsibilities

Own one or more security risks at Aduna, including risks introduced by AI and large language model-based features, and drive engineering teams to address those risks while enabling the company to move quickly.
Lead cross-organizational technical efforts to solve security problems spanning Platform, Integration, Site Reliability Engineering, and Product teams.
Disambiguate and decompose security problems and solutions, and create clarity for engineering and product partners.
Design and implement security controls across application, infrastructure, and AI layers, including identity, authentication, authorization, encryption, secret management, and model and prompt safety controls.
Operate and evolve the HashiCorp Vault-based secret management platform, including secrets engines, dynamic credentials, policies, namespaces, and integration with workloads, continuous integration and continuous delivery, and AI/agent toolchains.
Harden Kubernetes clusters, cloud accounts, continuous integration and continuous delivery pipelines, and AI runtime environments against internal standards and industry best practices.
Build and maintain security tooling and automation for vulnerability management, dependency scanning, static and dynamic application security testing, container and image scanning, infrastructure-as-code policy enforcement, and model and prompt scanning.
Use large language models, agents, and machine-learning-based tooling to scale security triage, code review, threat detection, and evidence collection, with appropriate human oversight.
Translate policies, standards, and risk decisions from the Security governance function into technical controls, automated checks, and developer-facing guidance, including standards for responsible and ethical AI use.
Support audits and assessments by providing technical evidence, walkthroughs, and remediation plans.

Desired Qualifications

Growing familiarity with AI-specific frameworks, including the OWASP Large Language Model Top 10, NIST AI Risk Management Framework, and MITRE ATLAS.
Experience with system design, threat modeling, and risk assessment involving AI- or ML-enabled systems.

All Together, Extraordinary

adunaglobal.com

Aduna is the Connector of networks, bringing together leading telecom operators and technology partners to simplify global access to Network APIs. Through a single, unified platform, we enable businesses and developers to build more secure, seamless and innovative digital services.

Aduna's Security Area of Focus exists to protect the company, our CSP partners, and the data flowing through our APIs, while enabling the rest of the engineering organization to move fast and adopt AI safely. As a Senior Security Engineer in this group, you will be an Individual Contributor accountable for implementing security solutions across Aduna's platform and integration estate, and for operationalizing the standards, policies, and risk decisions issued by the Security governance function.

You will work hands-on, in collaboration with engineering teams across the company, to turn governance into engineered controls and guardrails that scale, including the controls needed to secure how we build with, and expose, AI capabilities.

This is a hands-on technical role focused on owning security outcomes. While it does not include people management, it requires strong accountability, the ability to drive and influence engineers across teams toward the right security decisions, and rigorous attention to standards and applicable telecom security guidelines.

What you will be focused on

Risk Ownership and Cross-Team Leadership

Operate with ownership and accountability for one or more security risks at Aduna, including risks introduced by AI and LLM-based features, driving and influencing engineering teams to comprehensively address those risks while enabling the company to move fast.

Lead cross-organizational technical efforts to solve challenging security problems that span the Platform, Integration, SRE, and Product teams.

Disambiguate and decompose security problems and solutions, and create clarity for engineering and product partners.

Security Implementation and Engineered Controls

Design and implement security controls across application, infrastructure, and AI layers, including identity, authentication, authorization, encryption, secret management, and model and prompt safety controls.

Operate and evolve Aduna's secret management platform built on HashiCorp Vault, including secrets engines, dynamic credentials, policies, namespaces, and integration with workloads, CI/CD, and AI/agent toolchains.

Harden Kubernetes clusters, cloud accounts (AWS, Azure), CI/CD pipelines, and AI runtime environments against internal standards and industry best practices.

Build and maintain security tooling and automation for vulnerability management, dependency scanning, SAST/DAST, container and image scanning, infrastructure-as-code policy enforcement, and emerging categories such as model and prompt scanning.

Apply AI to security itself: use LLMs, agents, and ML-based tooling to scale triage, code review, threat detection, and evidence collection, with appropriate human oversight.

Governance and Policy Operationalization

Translate policies, standards, and risk decisions issued by the Security governance function into concrete technical controls, automated checks, and developer-facing guidance, including standards for the responsible and ethical use of AI.

Support audits and assessments by providing technical evidence, walkthroughs, and remediation plans.

What You Bring

Education
Bachelor's degree in Computer Science, Engineering, Cybersecurity, or equivalent practical experience.

Experience

8+ years of experience in security engineering, application security, cloud security, or a closely related discipline.

Proven track record of managing security risk and navigating the tradeoff between security and friction in an engineering organization.

Experience driving cross-team engineering and security initiatives end to end.

Experience with system design, threat modeling, and risk assessment, ideally including AI or ML-enabled systems.

Technical Skills

Strong working knowledge of security standards and frameworks (ISO 27001, SOC 2, NIST CSF, OWASP ASVS, CIS Benchmarks), plus growing familiarity with AI-specific frameworks (OWASP LLM Top 10, NIST AI RMF, MITRE ATLAS).

Knowledge of current threat tactics, techniques, and procedures, including AI-specific threats such as prompt injection, model and data poisoning, jailbreaks, and unsafe autonomous actions.

Solid knowledge of identity and access management, including OAuth 2.0, OIDC, SAML, mTLS, and PKI.

Experience with cloud security on AWS and/or Azure (IAM, KMS, network security, logging, posture management).

Experience with Kubernetes security (RBAC, network policies, admission control, image signing, runtime security).

Working knowledge of infrastructure as code and GitOps (Terraform, FluxCD, GitLab CI or similar) and how to embed security controls into them

Our Offer

Employment contract providing security and transparency.
Hybrid work model: 3 days in the office in Łódź (Poland), 2 days remote.
Private medical care, life insurance, and Multisport card.
Unlimited paid time off.
High level of autonomy, ownership, and influence.
An international environment where your work will have direct business impact.

Aduna is committed to fostering a diverse and inclusive workplace. We welcome applicants from all backgrounds who are passionate about driving the next wave of innovation in telecommunications.

About the Company

Aduna Global

Sells developers access to mobile network features

Aduna Global acts as a wholesale API hub for telecom networks, providing developers with a single access point to a growing set of network APIs built on CAMARA and GSMA Open Gateway standards. It standardizes cross-network capabilities like identity verification, SIM swap detection, and quality-of-service controls, so apps can work across many operators and geographies. It operates as a 50:50 joint venture between Ericsson and a coalition of global CSPs, using a fixed-pricing contract model to simplify integration for CPaaS platforms, hyperscalers, GSIs, and ISVs. Its goal is to speed up the deployment of digital services by offering reliable, scalable telecom network access through a unified platform.

Company size: 51-200
Company stage: Not listed
Total funding: Not listed
Headquarters: Plano, TX
Founded: 2025

Recently Posted Jobs

Explore more opportunities at Aduna Global

See more jobs