Remote opportunity at
CanonicalStaff Security Operations Engineer
Canonical is hiring Security Operations Engineers at senior and staff levels to build out a team that answers to the CISO. At the senior end, the…
Career Tools
About This Role
Canonical is hiring Security Operations Engineers at senior and staff levels to build out a team that answers to the CISO. At the senior end, the role asks for hands-on experience protecting critical assets from persistent, sophisticated attackers, including state-sponsored groups. Entry-level openings are also available for standout candidates who have a clear personal interest in attacking and defending systems, even if their experience is limited. The SecOps team designs,…
Job Description
Canonical is hiring Security Operations Engineers at senior and staff levels to build out a team that answers to the CISO. At the senior end, the role asks for hands-on experience protecting critical assets from persistent, sophisticated attackers, including state-sponsored groups. Entry-level openings are also available for standout candidates who have a clear personal interest in attacking and defending systems, even if their experience is limited.
The SecOps team designs, builds and develops Canonical's security practices, tools, systems and policies. It owns the strategy for protecting company data, internal infrastructure and the build pipeline, and creates controls that spot, contain and fix threats automatically.
The team aims to add real assurance and measurable rigour to the open source supply chain, and to lift the resilience of the wider Ubuntu ecosystem. Its members share what they learn through talks and events, contribute to community efforts on threat intelligence, and sometimes represent Canonical on sector governance bodies.
The role suits an engineer with a grasp of threat modelling and risk management, an understanding of security architecture and widely used tooling, and a drive to stay at the cutting edge of security. Hands-on offensive or defensive security work and time in a security operations centre are valued.
Responsibilities
- Implement and evolve SecOps standards and response playbooks
- Review and strengthen the security architecture
- Assess, choose and roll out new security tools and methods
- Find, contain and help fix security threats and attacks
- Build the team's reputation through blog posts, whitepapers and conference talks
- Add to community threat-intel efforts across open source
- Lead threat modelling and tabletop drills, and push SecOps habits through engineering and the IS group
- Create SecOps training and learning materials
- Define, track and report SecOps performance indicators
- Deliver SecOps work within the agile engineering approach
- Brief security leadership and help drive change
Requirements
- Outstanding academic background
- University-level degree in a computing or engineering subject, or a persuasive alternative background
- Motivation and a history of going beyond expectations
- Strong personal drive to stay at the cutting edge of the field
- Hands-on command of threat modelling methods and risk frameworks
- Understanding of security architecture design, and of leading commercial security products
- Experience both providing and using threat intelligence feeds
- Familiarity with risk frameworks such as NIST CSF and standards such as ISO 27001
Qualifications
- Prior employment in a SOC or another security operations unit
- Hands-on skills from offensive or defensive security teams
- Experience dealing with state-level and other advanced persistent threat actors
Core Skills
Benefits
- Pay considers location, experience and performance, reviewed annually
- Performance-driven annual bonus
- Learning allowance of USD 2,000 yearly
- Recognition awards
- Team sprints in person twice a year
- Annual leave, maternity leave and paternity leave
- Support through an employee assistance scheme
- Opportunities to visit new places and meet colleagues, plus Priority Pass and upgraded long-haul company travel
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Who does the new team report to?
The team answers to the CISO.
Are junior roles included?
Yes. The posting mentions junior positions for standout candidates with a clear interest in cyber attack and defence, even with limited experience.
Which region is the role based in?
The listing is marked remote, but the posting does not specify a particular region.
Is salary stated?
No figure is listed. The posting says pay depends on location, experience and performance, and mentions a performance-driven annual bonus.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
