Security Software Engineer

Canonical

Remote

Full Time

Posted April 1, 2026

Not Specified

Remote

~54 people viewed this recently

Apply Now

Application opens on company website

Job Description

Canonical is seeking security-focused software engineers to enhance product security through advanced practices, contribute to open source projects, and collaborate with global teams. The role involves developing security features, analyzing vulnerabilities, and supporting the security of Ubuntu and related open source ecosystems in a remote, worldwide setting.

Key Responsibilities

Define, implement, and document new security features
Lead security-focused initiatives within product engineering teams
Analyze, fix, and test vulnerabilities in open source software
Audit and analyze source code for vulnerabilities
Integrate new security tools into infrastructure, pipelines, and processes
Develop, test, and maintain security capabilities and automation
Extend and enhance cryptographic components to meet compliance standards
Work with external partners to develop security benchmarks
Stay updated on security industry trends and developments
Provide guidance and support on security best practices to engineering teams

Requirements

Be an exceptional security-focused software engineer, passionate about open source, and excited by Canonical s products and mission.
Ability to be productive in a globally distributed team through strong self-discipline and motivation.
Mandatory international travel at least twice a year, typically for one week.
Define, implement, and document new security features.
Lead security-focused initiatives within a product engineering team.
Analyze, fix, and test vulnerabilities in open source software.
Contribute to Ubuntu and upstream open source projects to benefit the community.
Audit and analyze source code for vulnerabilities.
Integrate new tools into security infrastructure, pipelines, and processes.
Achieve and retain various security certifications, including FIPS and Common Criteria CC certifications.
Extend and enhance Linux cryptographic components to meet country-specific compliance requirements.
Work with external partners to develop Center for Internet Security CIS benchmarks.
Design and develop hardening automation for Ubuntu.
Stay up to date with trends and developments in the security industry.
Develop, test, and maintain new security software capabilities.
Provide guidance and support to other engineering teams on security best practices.
Hold an undergraduate degree in Computer Science or STEM, or demonstrate a compelling alternative educational or experiential background.
Have a thorough understanding of common categories of security vulnerabilities and how to fix them.
Possess knowledge of modern software engineering techniques.
Be familiar with open source development tools and methodologies.
Have skills in one or more of the following programming languages: C, C++, Python, Go, Rust, Java, Ruby, PHP, JavaScript, or Typescript.
Have experience as a security champion and driving security within a wider Software Development Life Cycle (SDLC) process.
Possess professional written and spoken English skills.
Experience with Linux Debian or Ubuntu preferred.
Demonstrate excellent interpersonal skills, curiosity, flexibility, accountability, passion, thoughtfulness, and self-motivation.
Have excellent communication and presentation skills.
Be results-oriented with a personal drive to meet commitments.

Benefits & Perks

Compensation is based on geographical location, experience, and performance, with annual reviews and more frequent reviews for graduates and associates

Performance-driven annual bonus

Distributed work environment with the opportunity to work remotely

Twice-yearly in-person team sprints at interesting locations around the world

Personal learning and development budget of USD 2,000 per year

Annual compensation review

Recognition rewards

Annual holiday leave

Maternity and paternity leave

Employee Assistance Programme

Opportunity to travel to new locations to meet colleagues

Priority Pass and travel upgrades for long-haul company events