AppSec Jobs
← Back to all jobs

Orion Innovation

Senior Security Operations Engineer

Ottawa, Ontario, CanadaWebsite

Full details on LinkedIn

The complete job description, requirements, and application details are available on the original posting.


About Orion Innovation

Orion Innovation is a global digital transformation and product development services firm founded in 1993 and headquartered in Edison, New Jersey. With over 6,400 associates across major delivery centers in North America, EMEA, APAC, and LATAM, Orion focuses on helping enterprises innovate and scale through digital strategy, experience design, and engineering. The company offers a wide range of services, including software engineering, cloud and infrastructure services, data analytics, cybersecurity, and mobile technology. Orion serves various industries such as hi-tech, financial services, healthcare, automotive, and education, providing comprehensive solutions that support digital product development and business transformation. With an annual revenue of approximately $1.3 billion, Orion is recognized as a leader in outsourcing and digital innovation. The company is committed to corporate social responsibility, promoting diversity, community engagement, and initiatives aimed at improving health and education.

Industry

information technology & services

Employees

6,400

1971 engineers

Revenue

$1.3B

Website

Visit →

Security at Orion Innovation

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

Security Philosophy

  • Holistic and Unified approach to cybersecurity with Flexible and Efficient delivery.
  • Collaborates strategically with leadership and all stakeholders including IT, security, legal, and business teams. Emphasizes proactive security measures with philosophy that 'The most important security work is done long before an attempted breach occurs.' Addresses modern challenges including 'AI against AI' and ensuring LLM guardrails operate within defined principles.
  • No explicit mention of 'paved road' or specific developer-centric tooling workflows in public mission statements.

Security Team

Org Structure & Reporting Line: Information not publicly available. Key Public-Facing Leaders: Aaron Mathews (Global Head of Cybersecurity Practice), David Winter (EVP - Chief Cloud & Strategic Partner Officer), Rajul Rana (Chief Technology Officer). Team Size Estimate: Information not publicly available. Active AppSec Job Postings: 1 (Security Risk Analyst) with common skill/tool patterns in Security Operations, Infrastructure Advisory, Cloud Governance. Gaps: No public CISO or dedicated AppSec organizational chart available; leadership primarily categorized under 'Cybersecurity Practice' or 'Cloud & Strategic Partners.'

Key Initiatives

  • DevSecOps (security operations) implementation for shift-left practices.
  • Vulnerability management process includes conducting penetration testing and vulnerability assessments, with proactive detection and remediation of threats.
  • Secure SDLC focus on Workload and Programming Security.
  • Recent initiatives include AI-Powered Managed SOC with collaborative threat intelligence sharing and LLM Guardrails for safeguarding enterprise AI.
  • Gaps: No public data on specific vulnerability triage SLAs, bug bounty programs, or internal security champion structures.

Preparing for an AppSec interview?

Get the weekly briefing 2,000+ security pros trust.