Head of Security Operations

Overview

This global leadership role in cybersecurity manages the Security Operations (SecOps) team responsible for the design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of the strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our infrastructure and product deployments, and for designing and implementing technical security controls that identify, contain and remediate threats automatically. The team contributes ideas and requirements for Canonical product security to improve resilience and robustness for Ubuntu customers and users subject to cyber attack. This role reports to the Chief Information Security Officer (CISO).

As a leader on cybersecurity, the SecOps team manager collaborates with the Organizational Learning and Development team to develop playbooks and facilitate SecOps training across Canonical. They will operate in a wider security organization, run a high-performing security team and improve Canonical’s security posture, while integrating the team’s insights into Canonical’s broader software development process.

While this is a management position, managers are expected to be expert practitioners who lead by example, contribute at the highest level, and assess work based on their professional experience and skill. Candidates should have deep, hands-on expertise with a range of open source and proprietary security tooling and practices, which can be integrated into a holistic next-generation security solution across Canonical’s interests.

The SecOps team’s mission extends to contributing to the security of the wider open source ecosystem. They may share knowledge through public presentations and industry events, share threat intelligence with the wider community, or represent Canonical in sector-specific governance bodies.

Optional: This role may involve public speaking, threat intelligence sharing, and collaboration with external partners as appropriate to Canonical’s security initiatives.