About this role
Job title: Staff Security Operations Engineer
About the Role
Canonical is expanding its Security Operations team and has opened multiple senior and staff Security Operations Engineer (SOC) positions. The new team reports to the CISO, and focuses on defending highly contested critical assets. This is a home-based, worldwide opportunity for experienced security professionals to build and operate a world-class SOC.
What You'll Do
- Monitor, detect, and respond to security incidents to protect Canonical's assets.
- Hunt for threats, investigate anomalies, and coordinate incident response efforts with the SOC team and other stakeholders.
- Develop and improve security monitoring capabilities, playbooks, and automation.
- Collaborate with product and platform teams to remediate vulnerabilities and bolster defenses.
- Provide guidance and mentorship for junior security engineers in a remote, global team.
What We're Looking For
- Senior/Staff level experience in security operations (SOC), with deep expertise in defending critical assets.
- Strong incident response, threat detection, and forensics skills.
- Experience working in a distributed, remote team environment.
- Knowledge of security operations tooling (SIEM, EDR, threat intel, etc.) and cloud security concepts.