Remote opportunity at
CanonicalHead of Security Operations
Canonical seeks a Head of Security Operations for a remote position to direct the cyber security operations team. This global leadership role involves shaping security strategies,…
Career Tools
About This Role
Canonical seeks a Head of Security Operations for a remote position to direct the cyber security operations team. This global leadership role involves shaping security strategies, tools, and policies to protect internal infrastructure, data, and build processes. Canonical builds and maintains systems where security resilience impacts both internal operations and Ubuntu users worldwide. The person in this position will act as a technical expert while managing personnel, guiding SOC architecture,…
Job Description
Canonical seeks a Head of Security Operations for a remote position to direct the cyber security operations team. This global leadership role involves shaping security strategies, tools, and policies to protect internal infrastructure, data, and build processes. Canonical builds and maintains systems where security resilience impacts both internal operations and Ubuntu users worldwide.
The person in this position will act as a technical expert while managing personnel, guiding SOC architecture, and establishing threat mitigation standards. Responsibilities include building security training programs, engaging with the open-source community through threat intelligence sharing and public presentations, and integrating insights into the company software development lifecycle. The role reports directly to the Chief Information Security Officer.
This opportunity is well-suited for an experienced security practitioner with a strong background in Linux security, threat response, and SOC design, who is prepared to lead by example and drive next-generation security solutions.
Responsibilities
- Recruit and mentor skilled technical security personnel
- Establish security protocols, standards, and operational playbooks
- Oversee the architecture, design, and continuous improvement of the Security Operations Center
- Assess, choose, and deploy new security instruments and methodologies
- Detect, contain, and manage the remediation of cyber threats and attacks
- Expand thought leadership and visibility for Canonical security operations
- Participate in open-source threat intelligence programs
- Lead threat modeling, tabletop exercises, and related practices across engineering and internal systems
- Create learning and development curriculum for security operations
- Write whitepapers, blog articles, and deliver conference talks
- Establish and monitor key performance indicators for security operations
- Manage workloads utilizing agile engineering workflows
- Collaborate with security leadership to report performance data and drive organizational change
Requirements
- Proven experience handling advanced threat actors and nation-state level threats
- Advanced technical expertise in Security Operations Centers from inception
- Comprehensive knowledge of SOC design, including logging, firewalls, network segmentation, and honeypots
- Expertise in Linux security principles
- Capacity to create, execute, automate, and evaluate incident response playbooks
- Familiarity with security architecture and industry-standard tooling
- Background working with threat intelligence feeds
- Experience applying security risk management frameworks like NIST CSF
- Strong academic background spanning high school and university
- Demonstrated drive, initiative, and high personal motivation in technology security
- Proven leadership and management capabilities
- Exceptional business English writing and presentation abilities
- Accountability and accuracy when reporting performance metrics
Qualifications
- Undergraduate degree in Computer Science or a STEM discipline, or a compelling alternative background
- Background in offensive or defensive security teams with hands-on practice
- Familiarity with open-source security utilities
- Experience implementing security standards such as ISO 27001
- Background in security posture management for corporate endpoints
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the posting specifies that the role is remote.
What employment type is this role?
The posting specifies that this is a full-time position.
Who does this role report to?
The Head of Security Operations reports directly to the CISO.
What is the salary for this position?
The job posting does not specify the salary.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.