Security Software Engineer at Canonical

Confirmed open

Build security features, investigate vulnerabilities and guide product teams on secure engineering for Ubuntu and open-source software.

Canonical

Location: Home based - Worldwide
Work arrangement: remote
Technologies: Python, JavaScript, TypeScript, Java, C++, Linux, Go

Role overview

Canonical places security-oriented engineers within product teams and also develops security-led products such as AppArmor and Ubuntu Security Guide. The opening is globally remote and involves at least two international trips a year.

Responsibilities

Design and implement security features and lead threat modelling, design review, static analysis or fuzzing work.
Find, fix and test vulnerabilities in Ubuntu and upstream open-source software.
Improve security tooling and automation, including hardening and compliance work such as FIPS, Common Criteria or CIS benchmarks where assigned.
Advise product teams and work with partners and the open-source community on secure development.

Qualifications

Understanding of common vulnerability classes, secure software engineering and open-source development methods.
Programming ability in at least one language listed by the employer, including C, C++, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript.
Experience promoting security in a wider software development lifecycle, plus Linux familiarity and professional English.
A computer science or STEM degree, or a compelling alternative route, and the self-discipline to work in a distributed team.

Benefits

Canonical lists distributed home-based work with in-person team meetings, a USD 2,000 annual personal learning budget, annual compensation review and recognition awards.
The posting also names annual leave, parental leave, an employee assistance programme and travel-related support for company events. The package can vary by location.

About Canonical

Canonical publishes Ubuntu and develops open-source software for cloud, connected devices and enterprise infrastructure. Its teams work across countries.