Senior Security Operations Lead - Open Source

Canonical Ltd.; Lisboa; Remote; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Distributed work environment with team

Learning and development budget

Annual bonus

Paid holiday leave

Parental leave

Employee Assistance Programme

Job summary

Canonical Ltd. is seeking a Senior or Staff Engineer for Security Operations. The role focuses on designing, building, and operating a world-class SOC, with leadership, mentorship, and hands-on contributions across security engineering, software tooling, and incident response.

Junior positions are available for less-experienced candidates, and there is emphasis on contributing to open source security, publishing at conferences, and sharing threat intelligence with the community.

Qualifications

• An exceptional academic track record.
• Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path.
• 10+ years of relevant professional experience.

Responsibilities

• Provide operational and engineering leadership.
• Implement and evolve Canonical’s Security Operations Center.
• Design and develop security software and platforms.
• Monitor for, identify, respond to, and remediate security incidents.
• Assess and improve Canonical’s security controls.
• Mentor early-career Security Operations engineers.
• Plan and deliver work within Canonical's agile engineering framework.
• Contribute to open source security.
• Publish blog posts, whitepapers and conference presentations.

Skills

Leadership

Python

Bash

GitOps

Education

Bachelor's degree in Computer Science or STEM

Tools

Git

Kubernetes

Terraform

Ansible

Job description

Canonical Ltd. is seeking a Senior or Staff Engineer for Security Operations. The role focuses on designing, building, and operating a world-class SOC, with leadership, mentorship, and hands-on contributions across security engineering, software tooling, and incident response.

Junior positions are available for less-experienced candidates, and there is emphasis on contributing to open source security, publishing at conferences, and sharing threat intelligence with the community.