Canonical Group Ltd
Head of Security Operations
Canonical Group Ltd, Jackson, Mississippi, United States,
This global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.As a leader on cyber security in the company, the SecOps team manager will collaborate with our Organisational Learning and Development team to develop playbooks and facilitate SecOps training across Canonical. They will operate in a wider security organisation, run a high performing security team and improve Canonical's security posture. They will lead initiatives to integrate the team's insights into Canonical's broader software development process.While this is a management position, we expect managers to be expert practitioners, able to lead by example, contribute at the highest level, and assess work based on their own professional experience and skill. Candidates should have deep, hands-on expertise with a range of open source and proprietary security tooling and practices, which they can integrate into a holistic next generation security solution across the breadth of Canonical's interests.The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.This role reports to the CISO.What you will do in this role:
Hire and mentor a team of outstanding technical security professionalsDefine Canonical's SecOps security standards and playbooksOwn and drive the architecture and design of the SOCAnalyse and improve Canonical's security architectureEvaluate, select and implement new security tools and practicesIdentify, contain and guide the remediation of security threats and cyber attacksGrow the presence and thought leadership of Canonical SecOps practiceContribute to open source threat intelligence initiativesDrive threat modelling, table top exercises and other SecOps practices across Engineering, IS and CanonicalDevelop Canonical SecOps learning and development materialsPublish blog posts, whitepapers and conference presentationsIdentify, implement and track SecOps KPIsPlan and deliver SecOps work in the framework of Canonical's agile engineering practiceWork with Security leadership to present information and influence changeWhat we are looking for
Proven track record of mitigating with advanced threat actors and nation state threatsExpert technical understanding of SOCs from the ground upIn depth knowledge of SOC architecture and design including strategies for logging, firewalls, network segmentation, honeypots etcSomeone who understands how the SOC works not just how to use itAbility to define, implement, automate and measure effective incident response playbooksKnowledge of security architecture and market-leading security toolsExperience contributing to, and consuming, threat intelligence feedsExperience in security risk management frameworks such as NIST CSFAn exceptional academic track record from both high school and universityUndergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative pathDrive and a track record of going above-and-beyond expectationsDeep personal motivation to be at the forefront of technology securityLeadership and management abilityExcellent business English writing and presentation skillsConfidence to report security performance metrics with accountability for accuracy and completenessOptional things we value
Experience in offensive or defensive security teams with hands-on abilityExperience with open source security toolsExperience with security standards such as ISO 27001Experience with security posture management of corporate endpoitnsApply for this job
*indicates a required fieldFirst Name *Last Name *Email *PhoneResume/CV *Enter manuallyAccepted file types: pdf, doc, docx, txt, rtfEducationSchool Select...Degree Select...Select...During this application process I agree to use only my own words. I understand that plagiarism, the use of AI or other generated content will disqualify my application. * Select...Please describe your most intensive cyber-security operational experience, where you felt the threat actors were most sophisticated or the stakes particularly high. Please describe your role and contribution to that security work. *Please list of SecOps tools or technologies that you are familiar with, along with any comments to indicate the tools in which you have very significant experience or interest. *Do you have experience against nation state level adversaries? *Describe your experience building or designing a SOC? *How did you perform in mathematics at high school? * Select...How did you perform in your native language at high school? * Select...Please share your rationale or evidence for the high school performance selections above. Make reference to provincial, state or nation-wide scoring systems, rankings, or recognition awards, or to competitive or selective college entrance results such as SAT or ACT scores, JAMB, matriculation results, IB results etc. We recognise every system is different but we will ask you to justify your selections above. *What was your bachelor's university degree result, or expected result if you have not yet graduated? Please include the grading system to help us understand your result e.g. ‘85 out of 100’, ‘2:1 (Grading system: first class, 2:1, 2:2, third class)’ or ‘GPA score of 3.8/4.0 (predicted)’. We have hired outstanding individuals who did not attend or complete university. If this describes you, please continue with your application and enter ‘no degree’. *Universities around the world score degrees in different ways. Please indicate your result, or expected result if you are close to graduation, along with information about the grading system.We expect all colleagues to meet in person 2-4 times a year, at internal company events lasting between 1-2 weeks. We try to pick new and interesting locations that will likely require international travel and entry requirement visas and vaccinations. Are you willing and able to commit to this? * Select...Please note that if you require any accommodation for travel that relates to a physical disability please do let us know during your hiring process and we will be happy to discuss your requirements further.WebsiteLinkedIn ProfileIn which country do you currently work? * Select...Please select your current location from the dropdown.Please confirm that you have read and agree to Canonical's Recruitment Privacy Notice and Privacy Policy. * Select...For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.As set forth in Canonical’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.Select...Voluntary Self-Identification of Disability
Form CC-305Page 1 of 1OMB Control Number 1250-0005Expires 04/30/2026Voluntary Self-Identification of Disability Form CC-305 Page 1 of 1 OMB Control Number 1250-0005 Expires 04/30/2026Why are you being asked to complete this form?
We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp .How do you know if you have a disability?
A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability.
Disabilities include, but are not limited to:Alcohol or other substance use disorder (not currently using drugs illegally)Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDSBlind or low visionCancer (past or present)Cardiovascular or heart diseaseCeliac diseaseCerebral palsyDeaf or serious difficulty hearingDiabetesDisfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disordersEpilepsy or other seizure disorderGastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndromeIntellectual or developmental disabilityMental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSDMissing limbs or partially missing limbsMobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supportsNervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilitiesPartial or complete paralysis (any cause)Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysemaShort stature (dwarfism)Traumatic brain injury
Disability Status Select... PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.
#J-18808-Ljbffr
Hire and mentor a team of outstanding technical security professionalsDefine Canonical's SecOps security standards and playbooksOwn and drive the architecture and design of the SOCAnalyse and improve Canonical's security architectureEvaluate, select and implement new security tools and practicesIdentify, contain and guide the remediation of security threats and cyber attacksGrow the presence and thought leadership of Canonical SecOps practiceContribute to open source threat intelligence initiativesDrive threat modelling, table top exercises and other SecOps practices across Engineering, IS and CanonicalDevelop Canonical SecOps learning and development materialsPublish blog posts, whitepapers and conference presentationsIdentify, implement and track SecOps KPIsPlan and deliver SecOps work in the framework of Canonical's agile engineering practiceWork with Security leadership to present information and influence changeWhat we are looking for
Proven track record of mitigating with advanced threat actors and nation state threatsExpert technical understanding of SOCs from the ground upIn depth knowledge of SOC architecture and design including strategies for logging, firewalls, network segmentation, honeypots etcSomeone who understands how the SOC works not just how to use itAbility to define, implement, automate and measure effective incident response playbooksKnowledge of security architecture and market-leading security toolsExperience contributing to, and consuming, threat intelligence feedsExperience in security risk management frameworks such as NIST CSFAn exceptional academic track record from both high school and universityUndergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative pathDrive and a track record of going above-and-beyond expectationsDeep personal motivation to be at the forefront of technology securityLeadership and management abilityExcellent business English writing and presentation skillsConfidence to report security performance metrics with accountability for accuracy and completenessOptional things we value
Experience in offensive or defensive security teams with hands-on abilityExperience with open source security toolsExperience with security standards such as ISO 27001Experience with security posture management of corporate endpoitnsApply for this job
*indicates a required fieldFirst Name *Last Name *Email *PhoneResume/CV *Enter manuallyAccepted file types: pdf, doc, docx, txt, rtfEducationSchool Select...Degree Select...Select...During this application process I agree to use only my own words. I understand that plagiarism, the use of AI or other generated content will disqualify my application. * Select...Please describe your most intensive cyber-security operational experience, where you felt the threat actors were most sophisticated or the stakes particularly high. Please describe your role and contribution to that security work. *Please list of SecOps tools or technologies that you are familiar with, along with any comments to indicate the tools in which you have very significant experience or interest. *Do you have experience against nation state level adversaries? *Describe your experience building or designing a SOC? *How did you perform in mathematics at high school? * Select...How did you perform in your native language at high school? * Select...Please share your rationale or evidence for the high school performance selections above. Make reference to provincial, state or nation-wide scoring systems, rankings, or recognition awards, or to competitive or selective college entrance results such as SAT or ACT scores, JAMB, matriculation results, IB results etc. We recognise every system is different but we will ask you to justify your selections above. *What was your bachelor's university degree result, or expected result if you have not yet graduated? Please include the grading system to help us understand your result e.g. ‘85 out of 100’, ‘2:1 (Grading system: first class, 2:1, 2:2, third class)’ or ‘GPA score of 3.8/4.0 (predicted)’. We have hired outstanding individuals who did not attend or complete university. If this describes you, please continue with your application and enter ‘no degree’. *Universities around the world score degrees in different ways. Please indicate your result, or expected result if you are close to graduation, along with information about the grading system.We expect all colleagues to meet in person 2-4 times a year, at internal company events lasting between 1-2 weeks. We try to pick new and interesting locations that will likely require international travel and entry requirement visas and vaccinations. Are you willing and able to commit to this? * Select...Please note that if you require any accommodation for travel that relates to a physical disability please do let us know during your hiring process and we will be happy to discuss your requirements further.WebsiteLinkedIn ProfileIn which country do you currently work? * Select...Please select your current location from the dropdown.Please confirm that you have read and agree to Canonical's Recruitment Privacy Notice and Privacy Policy. * Select...For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.As set forth in Canonical’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.Select...Voluntary Self-Identification of Disability
Form CC-305Page 1 of 1OMB Control Number 1250-0005Expires 04/30/2026Voluntary Self-Identification of Disability Form CC-305 Page 1 of 1 OMB Control Number 1250-0005 Expires 04/30/2026Why are you being asked to complete this form?
We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp .How do you know if you have a disability?
A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability.
Disabilities include, but are not limited to:Alcohol or other substance use disorder (not currently using drugs illegally)Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDSBlind or low visionCancer (past or present)Cardiovascular or heart diseaseCeliac diseaseCerebral palsyDeaf or serious difficulty hearingDiabetesDisfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disordersEpilepsy or other seizure disorderGastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndromeIntellectual or developmental disabilityMental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSDMissing limbs or partially missing limbsMobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supportsNervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilitiesPartial or complete paralysis (any cause)Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysemaShort stature (dwarfism)Traumatic brain injury
Disability Status Select... PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.
#J-18808-Ljbffr