Canonical is seeking security-focused software engineers to enhance product security through advanced practices, contribute to open source projects, and collaborate with global teams to develop and maintain secure open source software, primarily around Ubuntu and Linux security features.
Key Responsibilities
Define, implement, and document new security features
Lead security-focused initiatives within product engineering teams
Analyze, fix, and test vulnerabilities in open source software
Contribute to Ubuntu and upstream open source projects
Audit and analyze source code for vulnerabilities
Integrate new security tools into infrastructure, pipelines, and processes
Extend and enhance cryptographic components to meet compliance standards
Collaborate with external partners to develop security benchmarks
Design and develop automation for system hardening
Stay current with security industry trends and developments
Develop, test, and maintain new security software capabilities
Provide guidance on security best practices to engineering teams
Requirements
An exceptional academic track record from both high school and university, or a compelling narrative about an alternative path to demonstrate equivalent knowledge and skills.
An undergraduate degree in Computer Science or STEM fields, or equivalent experience and skills demonstrated through a compelling narrative.
A track record of going above and beyond expectations in previous roles or projects.
Thorough understanding of the common categories of security vulnerabilities and how to fix them.
Knowledge of modern software engineering techniques.
Familiarity with open source development tools and methodologies.
Skill in one or more of the following programming languages: C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/TypeScript.
Experience as a security champion within a team or organization.
Experience driving security within a wider Software Development Life Cycle (SDLC) process.
Professional written and spoken English language skills.
Experience with Linux Debian or Ubuntu operating systems.
Ability to be productive in a globally distributed team through strong self-discipline and motivation.
Willingness to undertake mandatory international travel at least twice a year, typically for one week.
Ability to define, implement, and document new security features.
Ability to analyze, fix, and test vulnerabilities in open source software.
Experience contributing to Ubuntu and upstream open source projects to benefit the community.
Experience auditing and analyzing source code for vulnerabilities.
Ability to integrate new tools into security infrastructure, pipelines, and processes.
Ability to achieve and retain various security certifications, including FIPS and Common Criteria CC certifications.
Experience extending and enhancing Linux cryptographic components to meet country-specific compliance requirements.
Ability to work with external partners to develop Center for Internet Security (CIS) benchmarks.
Experience designing and developing hardening automation for Ubuntu.
Ability to stay up to date with trends and developments in the security industry.
Experience developing, testing, and maintaining new security-related software capabilities.
Ability to provide guidance and support to other engineering teams on security best practices.
Benefits & Perks
Compensation is based on location, experience, and performance, with annual reviews and potential for more frequent adjustments for graduates and associates
Performance-driven annual bonus
Distributed work environment with twice-yearly in-person team sprints in interesting locations
Personal learning and development budget of USD 2,000 per year
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass and travel upgrades for long haul company events
Ready to Apply?
Join Canonical and make an impact in renewable energy