Staff Security Operations Engineer

Canonical

Remote

Full Time

Posted April 1, 2026

Not Specified

Remote

~94 people viewed this recently

Apply Now

Application opens on company website

Job Description

This role involves designing, implementing, and evolving security practices and tools to protect Canonical's infrastructure and products, while contributing to open source threat intelligence and security community efforts. The position aims to enhance the security and resilience of Ubuntu and the broader open source ecosystem.

Key Responsibilities

Design, implement, and evolve Canonical security standards, practices, tools, and policies
Analyze and improve security architecture and infrastructure
Identify, contain, and guide the remediation of security threats and cyber attacks
Contribute to threat intelligence initiatives and security community sharing
Develop and deliver SecOps training, materials, and KPIs
Plan and execute SecOps activities within an agile engineering framework
Evaluate, select, and implement new security tools and practices
Drive threat modeling, tabletop exercises, and security practices across teams
Engage with security leadership to present findings and influence security strategies

Requirements

An undergraduate degree in Computer Science or STEM, or a compelling narrative about an alternative path demonstrating equivalent knowledge and skills.
Deep personal motivation to be at the forefront of technology security.
Expertise in threat modelling and risk management frameworks.
Knowledge of security architecture and market-leading security tools.
Experience contributing to, and consuming, threat intelligence feeds.
Experience in security risk management frameworks such as NIST CSF.
Experience with security standards such as ISO 27001.
Drive and a track record of going above-and-beyond expectations.
A proven track record of academic excellence and outstanding career performance, even if experience is limited.
Ability to analyze and improve security architecture.
Ability to evaluate, select, and implement new security tools and practices.
Ability to identify, contain, and guide the remediation of security threats and cyber attacks.
Experience in a security operations team or a security operations centre (SOC) is valued.
Experience in offensive or defensive security teams with hands-on ability is valued.
Experience with state-actor and other advanced persistent threats is valued.