Canonical is hiring senior/staff Security Operations Engineers to implement and evolve SecOps standards, security architecture, tooling, threat modelling, and incident response across Canonical's infrastructure and Ubuntu estate. Candidates should demonstrate strong academic performance and expertise in threat modelling, threat intelligence, risk management frameworks (e.g., NIST CSF), and security controls; experience ranges from exceptional early-career individuals to those with deep experience defending against APTs and state-level actors.

Lead and contribute to Canonical's Security Operations Center: perform security monitoring, threat hunting, incident response, and security engineering. Design and build security software and platforms, deploy and automate security tools (SRE practices), assess and improve security controls, mentor junior staff, and contribute to open source security and threat intelligence. Requires 10+ years' relevant experience, proficiency with scripting (Python, Bash), and familiarity with Git, GitOps, IaC and orchestration platforms such as Kubernetes.

Canonical seeks security-oriented software engineers to work across product teams on threat modeling, code auditing, vulnerability response, security tooling and integrations, and contributions to Ubuntu and upstream projects. The role expects fluency with Linux and a range of programming languages, experience driving security within an SSDLC, and participation in open source communities; it is globally remote with mandatory international travel at least twice yearly.

Work cross-functionally to establish and run Canonical's security risk program: define standards and playbooks, evaluate and implement risk tools and practices, lead quantified risk assessments using frameworks such as FAIR and statistical/sensitivity analysis, develop KRIs/KPIs and learning materials, and contribute threat intelligence and security guidance for products and the wider open source ecosystem.

Work remotely with a globally distributed kernel team to develop, test, patch and maintain Ubuntu Linux kernels across architectures (embedded to cloud). Responsibilities include kernel debugging, patch submission and review, tooling and automation for delivery and testing, collaboration with silicon and cloud partners, and participation in periodic in-person engineering events. Requires strong C programming, git, broad Linux kernel knowledge, and professional English communication.

Work on the Security Hardening team to extend Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS), develop audit and remediation automation for DISA-STIG and CIS benchmarks, collaborate with kernel and upstream projects, and engage external partners and consultants to achieve and retain security certifications for Ubuntu.

Canonical is hiring a Lead Data Governance Engineer to define, monitor and execute data governance policies and to design, implement and maintain Python-based tooling for automated data-mesh operations. The role involves deploying and operating team services, working with tools such as Trino and Ranger, and ensuring compliance with frameworks like GDPR/DPA/ISO. The position is remote in EMEA and requires occasional international travel (around twice a year).

Manage and grow a SecOps team responsible for designing and operating Canonical's SOC and security practices. Own SOC architecture and tooling, define playbooks and KPIs, detect/contain/remediate threats, contribute to product and open source security, run threat modelling and tabletop exercises, collaborate on SecOps learning and development, and present/report security performance.

Lead and develop a team of engineers to define and implement security standards and system hardening across the Ubuntu platform. Responsibilities include line management, coaching, driving engineering practices, representing the team to stakeholders, and supporting certification and compliance efforts (FIPS 140, CIS, DISA-STIG, FedRAMP, CRA). Requires experience with product security, relevant standards and benchmarks, agile environments, strong English communication, and occasional travel (twice yearly).

Canonical seeks an Engineering Manager for IAM to hire and lead a software engineering team building Go and Python services for identity and access management (SSO) used across company products. The role involves designing and implementing distributed systems, working with Kubernetes and container technologies, ensuring security and performance, participating in observability and open source community activities, and travelling internationally twice a year.

Lead and develop a security engineering team working on AppArmor (mandatory access control) for Ubuntu. Responsibilities include line management, coaching and career development, implementing engineering processes, planning and delivering projects, representing the team to stakeholders and customers, and collaborating with security engineering leadership. Role expects proficiency in C, knowledge of Linux kernel development and Linux Security Modules, experience in agile development, strong English communication, and ability to travel twice a year for company events.