Ubuntu Security Engineer

Stack

Responsibilities

• ▹Analyze, fix and test vulnerabilities in open source packages
• ▹Keep track of vulnerabilities in the Ubuntu ecosystem as they are discovered, researched and fixed, using internal tools
• ▹Collaborate with other teams in the Ubuntu community and upstream developers to exchange or develop vulnerability patches
• ▹Audit source code for vulnerabilities
• ▹Build features and tools that help teams strengthen the security of their products
• ▹Produce security assessments and conduct code reviews as needed

Requirements

• ▹A thorough understanding of the common categories of security vulnerabilities and techniques for fixing them
• ▹Familiarity with coordinated disclosure practices
• ▹Familiarity with open source development tools and methodologies
• ▹Skill in one or more of C, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript
• ▹Excellent logic, problem-solving, troubleshooting and decision-making skills
• ▹Experience with Linux (Debian or Ubuntu preferred)
• ▹International travel at least twice a year, usually for one week

Soft skills

What we offer

• ▹Globally remote work
• ▹Twice-yearly in-person team sprints
• ▹Personal learning and development budget of USD 2,000 per year
• ▹Annual compensation review
• ▹Performance-driven annual bonus or commission
• ▹Recognition rewards
• ▹Annual holiday leave
• ▹Maternity and paternity leave
• ▹Team Member Assistance Program and Wellness Platform
• ▹Opportunity to travel to meet colleagues
• ▹Priority Pass and travel upgrades for long-haul company events

About the company

Canonical publishes Ubuntu and is a leading provider of open source software and operating systems. The company has been remote-first since 2004, with 1200+ colleagues in 75+ countries.