Reporting to the CISO, lead the team that designs, builds and runs Canonical's security practices, tools, systems and policies, protecting company data, internal infrastructure and build pipelines, and building automated controls to detect, contain and fix threats. A hands-on management role.
Hire, mentor and lead a team of technical security staff
Set SecOps standards and incident response playbooks
Design and drive the architecture of the SOC
Assess and improve Canonical's security architecture
Evaluate, select and deploy security tools and practices
Identify, contain and guide remediation of threats and attacks
Build external presence and thought leadership, including blogs, whitepapers and talks
Contribute to open source threat intelligence
Lead threat modeling, tabletop exercises and SecOps practices across Engineering and IS
Create SecOps training materials
Define, track and report SecOps KPIs
Deliver SecOps work within Canonical's agile process
Work with security leadership to influence change
Requirements
Track record handling advanced persistent threats and nation-state actors
Deep understanding of how SOCs work, including logging, firewalls, network segmentation and honeypots
Expert-level Linux security knowledge
Ability to build, automate and measure incident response playbooks
Familiarity with security architecture and leading commercial tools
Experience contributing to and consuming threat intelligence feeds
Experience with risk frameworks such as NIST CSF
Strong academic record and an undergraduate degree in computer science or a STEM field, or a convincing account of a non-traditional path
Demonstrated drive, personal commitment to security and leadership ability
Strong business English writing and presentation skills
Willingness to report security metrics and own their accuracy
Nice to have: offensive or defensive security experience with hands-on skills
Nice to have: experience with open source security tools
Nice to have: familiarity with standards such as ISO 27001
Nice to have: experience managing endpoint security posture
Done for you
We'll apply to this for you
Denidel's HR team submits and tracks the application on your behalf.
