Security Software Engineer

Stack

Responsibilities

• ▹Define, implement and document new security features
• ▹Lead security-focused initiatives within a product engineering team
• ▹Analyse, fix and test vulnerabilities in open source software
• ▹Contribute to Ubuntu and upstream open source projects
• ▹Audit and analyse source code for vulnerabilities
• ▹Integrate new tools into the security infrastructure, pipelines and processes
• ▹Achieve and retain various security certifications
• ▹Extend and enhance Linux cryptographic components to meet country-specific compliance requirements, such as FIPS and Common Criteria (CC)
• ▹Work with external partners to develop Center for Internet Security (CIS) benchmarks
• ▹Design and develop hardening automation for Ubuntu
• ▹Stay up to date with trends and developments in the security industry
• ▹Develop, test and maintain new software capabilities
• ▹Provide guidance and support to other engineering teams on security best practices

Requirements

• ▹Exceptional academic track record from both high school and university
• ▹Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
• ▹A track record of going above and beyond expectations
• ▹Thorough understanding of the common categories of security vulnerabilities and how to fix them
• ▹Knowledge of modern software engineering techniques
• ▹Familiarity with open source development tools and methodologies
• ▹Skill in one or more of C, C++, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript
• ▹Experience as a security champion
• ▹Experience driving security within a wider SSDLC process
• ▹Professional written and spoken English
• ▹Experience with Linux (Debian or Ubuntu preferred)
• ▹Excellent interpersonal skills, curiosity, flexibility and accountability
• ▹Passion, thoughtfulness and self-motivation
• ▹Excellent communication and presentation skills
• ▹Results-oriented, with a personal drive to meet commitments
• ▹Mandatory international travel at least twice a year, typically for one week

Nice to have

• ▹Clear and effective communication with the team and Ubuntu community members
• ▹Experience working with the Linux kernel
• ▹Experience with security certifications and knowledge of FIPS and/or Common Criteria (CC)
• ▹Experience with OVAL (Open Vulnerability Assessment Language)
• ▹Knowledge of cryptographic modules such as OpenSSL and Libgcrypt
• ▹Knowledge of low-level Linux cryptography APIs
• ▹Demonstrated ability to learn quickly
• ▹Performance engineering experience

Soft skills

What we offer

• ▹Distributed work environment with twice-yearly in-person team sprints
• ▹Personal learning and development budget of USD 2,000 per year
• ▹Annual compensation review
• ▹Performance-driven annual bonus
• ▹Recognition rewards
• ▹Annual holiday leave
• ▹Maternity and paternity leave
• ▹Employee Assistance Programme
• ▹Opportunity to travel to meet colleagues
• ▹Priority Pass and travel upgrades for long-haul company events

About the company

Canonical publishes Ubuntu and is a pioneer of open source software. It has been remote-first since 2004, with 1200+ colleagues in 75+ countries.