Specialty
The role
Canonical hires security-focused software engineers to sit inside product teams and push them toward better security practices. The work covers feature development, vulnerability response and open source contributions. Globally remote.
What you will do
- Define, implement and document new security features
- Analyse, fix and test vulnerabilities in open source software
- Audit source code for vulnerabilities
- Integrate new tools into security pipelines and processes
- Extend Linux cryptographic components to meet FIPS and Common Criteria requirements
- Build hardening automation for Ubuntu and advise other teams on security practice
What they ask for
- Understanding of common vulnerability categories and how to fix them
- Skill in at least one of C, C++, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript
- Familiarity with open source development tools and methods
- Experience as a security champion or driving security in a secure development lifecycle
- Undergraduate degree in Computer Science or another STEM subject, or a strong case for an alternative path
- Professional written and spoken English
- Able to travel internationally at least twice a year, typically for a week
What they offer
- Fully distributed work, with in-person team sprints or company events
- Personal learning and development budget of USD 2,000 per year
- Annual compensation review and a performance-driven annual bonus
- Recognition rewards
- Annual holiday leave plus maternity and paternity leave
- Employee assistance programme
This is our own short reading of the posting. The full description, and anything that has changed since, is on Canonical's careers page behind the apply button.
