Canonical is seeking security-focused software engineers to enhance product security through advanced practices, contribute to open source projects, and collaborate with global teams to ensure the safety and integrity of their open source software and operating systems.
Key Responsibilities
Define, implement, and document new security features
Lead security-focused initiatives within product engineering teams
Analyze, fix, and test vulnerabilities in open source software
Audit and analyze source code for vulnerabilities
Integrate new security tools into infrastructure, pipelines, and processes
Develop, test, and maintain security capabilities and automation
Extend and enhance cryptographic components to meet compliance standards
Work with external partners to develop security benchmarks
Stay updated on security industry trends and developments
Provide guidance and support on security best practices to engineering teams
Requirements
An exceptional academic track record from both high school and university, or a compelling narrative about an alternative path.
An undergraduate degree in Computer Science or STEM, or equivalent experience demonstrating the ability to perform the role.
A track record of going above and beyond expectations in previous roles or projects.
Thorough understanding of the common categories of security vulnerabilities and how to fix them.
Knowledge of modern software engineering techniques.
Familiarity with open source development tools and methodologies.
Skill in one or more of the following programming languages: C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/TypeScript.
Experience as a security champion within a team or organization.
Experience driving security within a wider Software Development Life Cycle (SDLC) process.
Professional written and spoken English language skills.
Experience with Linux Debian or Ubuntu preferred.
Ability to be productive in a globally distributed team through strong self-discipline and motivation.
Willingness to undertake mandatory international travel at least twice a year, typically for one week.
Ability to define, implement, and document new security features.
Ability to analyze, fix, and test vulnerabilities in open source software.
Ability to audit and analyze source code for vulnerabilities.
Ability to integrate new tools into security infrastructure, pipelines, and processes.
Ability to achieve and retain various security certifications, such as FIPS and Common Criteria CC.
Ability to extend and enhance Linux cryptographic components to meet country-specific compliance requirements.
Ability to work with external partners to develop Center for Internet Security (CIS) benchmarks.
Ability to design and develop hardening automation for Ubuntu.
Ability to stay up to date with trends and developments in the security industry.
Ability to develop, test, and maintain new security-related software capabilities.
Ability to provide guidance and support to other engineering teams on security best practices.
Benefits & Perks
Compensation is based on location, experience, and performance, with annual reviews and performance-driven bonuses
Distributed work environment with the opportunity for remote work
Twice-yearly in-person team sprints in interesting locations around the world
Personal learning and development budget of USD 2,000 per year
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Recognition rewards
Travel upgrades for long haul company events
Ready to Apply?
Join Canonical and make an impact in renewable energy