Engineering Manager - Security Standards and Hardening

About the Role

As the most widely used Linux distribution, Ubuntu underpins the security of the entire internet. We are seeking a Security Engineering Manager to lead the charge in setting security standards for open-source software across the Ubuntu platform—from desktops and servers to edge devices, cloud infrastructure, Kubernetes, and OpenStack.

In this role, you will guide development teams in security best practices, certify core components to meet industry standards (FIPS, CIS, STIG, FedRAMP, CRA), and collaborate with partners like CIS and DISA to build secure operating system deployments.

What You Will Do

• Team Leadership: Lead and develop a team of engineers ranging from graduate to senior levels.
• Mentorship: Provide coaching, career development feedback, and measure team health indicators.
• Process Improvement: Implement disciplined engineering processes and evangelize organizational best practices.
• Stakeholder Management: Represent your team and product to customers, partners, and internal stakeholders.
• Security Compliance: Support products to meet strict requirements including FIPS 140, CIS, STIG, FedRAMP, and the CRA.
• Strategic Planning: Plan and manage progress on agreed goals and technical projects.

What We Are Looking For

• Education: Exceptional academic track record with an undergraduate degree in Computer Science or STEM (or a compelling alternative path).
• Leadership: Proven track record of developing and growing engineering talent.
• Technical Expertise:
  • Prior experience with FIPS/Common Criteria certified products.
  • In-depth knowledge of DISA-STIG or CIS benchmarks and audit/remediation tooling (e.g., Compliance as Code).
  • Strong background in software and application security.
• Soft Skills: Excellent verbal and written communication in English; professional manner in interacting with community and partners.
• Operational Excellence: Organized, result-oriented, and capable of ensuring timely, high-quality delivery.
• Availability: Ability to travel twice a year for company events (up to two weeks each).

Optional Skills

• Hands-on domain knowledge of Linux cryptography libraries (OpenSSL, GnuTLS).

What We Offer

• Distributed work environment with twice-yearly in-person team sprints.
• Personal learning and development budget of $2,000 USD per year.
• Annual compensation review and performance-driven annual bonus.
• Comprehensive benefits including holiday leave, maternity/paternity leave, and Employee Assistance Programme.
• Travel opportunities and travel upgrades for long-haul company events.