Ubuntu Security Engineer
Job description
An engineering role on Canonical's Ubuntu Security Team focused on monitoring, triaging, responding to, and documenting vulnerabilities in open source software, and building tools and features to strengthen Ubuntu's security. Open to candidates from Graduate to Senior level.
At a glance
- Employment
- Full-time
- Work mode
- Remote · Worldwide
What you'll do
- Analyzing, fixing, and testing vulnerabilities in open source packages
- Keeping track of vulnerabilities in the Ubuntu ecosystem as they are discovered, researched, and fixed, leveraging internal tools
- Collaborating with other teams in the Ubuntu community and upstream developers to exchange or develop vulnerability patches and ensure Ubuntu includes the most robust security features
- Auditing source code for vulnerabilities
- Building features and tools to help teams strengthen the security of their products and contribute to the overall security of Ubuntu
- Producing security assessments, building features, conducting code reviews, developing internal tools, engaging with the open source community, and participating in industry initiatives and events
What we're looking for
- Thorough understanding of the common categories of security vulnerabilities and techniques for fixing them
- Familiar with coordinated disclosure practices
- Familiar with open source development tools and methodologies
- Skilled in one or more of C, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript
- Excellent logic, problem-solving, troubleshooting, and decision-making skills
- Can clearly and effectively communicate with the team and Ubuntu community members
- Experience with Linux (Debian or Ubuntu preferred)
- Excellent interpersonal skills, curiosity, flexibility, and accountability
- Appreciative of diversity, polite, and effective in a multi-cultural, multi-national organization
- Thoughtfulness and self-motivation
- Result-oriented, with a personal drive to meet commitments
- Ability to be productive in a globally distributed team through self-discipline and self-motivation
- Willingness to travel internationally at least twice a year, usually for one week
Your team
Ubuntu Security Team
A team dedicated to providing security coverage across a wide range of ecosystems and environments, protecting the open source community and Ubuntu users from emerging threats.
Benefits
- Distributed work environment with twice-yearly team sprints in person
- Personal learning and development budget of USD 2,000 per year
- Annual compensation review
- Recognition rewards
- Annual holiday leave
- Maternity and paternity leave
- Team Member Assistance Program & Wellness Platform
- Opportunity to travel to new locations to meet colleagues
- Priority Pass and travel upgrades for long-haul company events
- Performance-driven annual bonus or commission
Apply
About Canonical
A leading provider of open source software and operating systems to the global enterprise and technology markets
Canonical publishes Ubuntu, one of the most important open-source projects and the platform for AI, IoT, and the cloud. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. It is founder-led, profitable, and growing.
Mission
To be at the forefront of the global move to open source and to change the world of software through Ubuntu, the platform for AI, IoT, and the cloud
Key facts
- 1200+ colleagues
- 2004
- Open source software and operating systems
- Publishes Ubuntu
- 1200+ colleagues in 75+ countries
- Very few office-based roles; most colleagues have worked from home since inception in 2004
- Founder-led, profitable, and growing
- Teams meet two to four times yearly in person
What they value
- Excellence
- Diversity
- Fairness
- Self-motivation
- Accountability