Specialty
The role
Canonical is hiring an Ubuntu Security Engineer to monitor, triage, fix and document vulnerabilities in open source software. Levels from graduate to senior are considered, and the role is globally remote.
What you will do
- Analyze, fix and test vulnerabilities in open source packages
- Track vulnerabilities across the Ubuntu ecosystem using internal tools
- Work with the Ubuntu community and upstream developers to exchange or develop patches
- Audit source code for vulnerabilities
- Build features and tools that strengthen the security of Ubuntu and its products
What they ask for
- Thorough understanding of common vulnerability categories and how to fix them
- Familiarity with coordinated disclosure and open source development tools
- Skill in one or more of C, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript
- Experience with Linux, Debian or Ubuntu preferred
- Clear communication with the team and community
- International travel at least twice a year, usually one week
What they offer
- Distributed work with twice-yearly in-person team sprints
- Personal learning and development budget of USD 2,000 per year
- Annual compensation review and performance-driven bonus or commission
- Annual holiday leave plus maternity and paternity leave
- Assistance programme, wellness platform and recognition rewards
This is our own short reading of the posting. The full description, and anything that has changed since, is on Canonical's careers page behind the apply button.
