Ubuntu Security Engineer

Security Engineer • Senior • Remote • Full-time • Germany

Germany

Canonical is hiring a Security Engineer for the Ubuntu Security Team to analyze, fix, and test vulnerabilities in open source packages. The role is open at all experience levels, fully remote, with occasional international travel.

Stack

data science Java JavaScript Linux PHP Python Ruby Rust TypeScript

Responsibilities

▹Analyze, fix, and test vulnerabilities in open source packages
▹Track vulnerabilities across the Ubuntu ecosystem
▹Collaborate with teams and upstream developers on patches
▹Audit source code for vulnerabilities
▹Build features and tools to strengthen security

Requirements

▹Understanding of vulnerability categories and fixing techniques
▹Familiarity with coordinated disclosure practices
▹Knowledge of open source development tools and methodologies
▹Skilled in C, Python, Go, Rust, Java, Ruby, PHP or JS/TS
▹Linux experience (Debian/Ubuntu preferred)

Nice to have

▹Willingness to travel internationally twice a year

Soft skills

Excellent logic and problem-solving skillsSelf-motivation and discipline in a distributed teamCuriosity, flexibility, accountability

What we offer

▹Fully remote work with a globally distributed team
▹2-4 in-person team meetups yearly in interesting locations
▹Stable, profitable, founder-led company

About the company

Canonical develops the Ubuntu operating system, a leading open source software provider with 1200+ colleagues in 75+ countries.

📅 Running for a while

• Posted 59 days ago
📋 This employer: 100% freshly verified (≤3 days) (333 active listings)

These signals come from our own daily check: when the listing appeared, and when we last saw it in the source. Not information from the employer, and not a guarantee that the role is still open.

Salary range

Not specified

Listing imported from an external source.

Work typeRemote

Location

Germany

TypeJob

Apply →

Source: Himalayas

🗺️ View on the map

More jobs at Canonical

All at this company (332) →

This listing comes from the employer's public careers page; the advertiser is responsible for its content. The summary is a machine-generated extract — check the original posting before applying.

Is this your company's listing? Request removal