Senior SOC Engineer & Open Source Security Leader

Canonical Ltd.; Helsinki; Remote; EUR 110,000 - 140,000; Full time

Benefits offered by this job

Learning budget USD 2,000 per year

Annual compensation review

Annual holiday leave

Maternity and paternity leave

Employee Assistance Programme

Opportunity to travel to new locations

Job summary

Canonical is seeking a Senior or Staff engineer for its Security Operations team. The role focuses on leading the design, build, and operation of a world-class SOC, mentoring engineers, and contributing to open source security.

You will implement and evolve the SOC, design security software, monitor and respond to incidents, and publish blog posts and conference materials. This is a remote-first role with travel opportunities as needed.

Qualifications

• 10+ years of relevant professional experience.
• Professional cybersecurity experience, preferably working or leading a Security Operations Center.
• Proficiency in Python and Bash.
• Knowledge of Git, GitOps, Infrastructure-as-Code, and common orchestration platforms (e.g., Kubernetes).

Responsibilities

• Provide operational and engineering leadership.
• Implement and evolve Canonical’s Security Operations Center.
• Design and develop security software and platforms.
• Monitor for, identify, respond to, and remediate security incidents.
• Assess and improve Canonical’s security controls.
• Mentor early-career Security Operations engineers.
• Plan and deliver work within Canonical's agile engineering framework.
• Contribute to open source security.
• Publish blog posts, whitepapers and conference presentations.

Skills

Security operations

Software engineering

Python

Bash

Git

GitOps

Kubernetes

Education

Bachelor's degree in Computer Science or STEM

Job description

Canonical is seeking a Senior or Staff engineer for its Security Operations team. The role focuses on leading the design, build, and operation of a world-class SOC, mentoring engineers, and contributing to open source security.

You will implement and evolve the SOC, design security software, monitor and respond to incidents, and publish blog posts and conference materials. This is a remote-first role with travel opportunities as needed.