Ubuntu Security Engineer - Canonical

About the Role

Canonical is seeking an Ubuntu Security Engineer to join our industry-leading security team. You will help protect the open-source community and Ubuntu users by monitoring, triaging, and remediating vulnerabilities across a wide range of ecosystems. We are hiring across all levels of experience, from Graduate to Senior.

Key Responsibilities

• Vulnerability Management: Analyze, fix, and test vulnerabilities in open-source packages.
• Tracking & Remediation: Monitor vulnerabilities within the Ubuntu ecosystem and coordinate with internal teams and upstream developers to develop patches.
• Security Auditing: Conduct source code audits to identify potential security issues.
• Tooling: Build features and internal tools to strengthen product security and contribute to the overall security posture of Ubuntu.
• Collaboration: Engage with the open-source community and participate in industry initiatives.

What We Are Looking For

• Thorough understanding of common security vulnerabilities and remediation techniques.
• Familiarity with coordinated disclosure practices and open-source development methodologies.
• Proficiency in one or more of: C, Python, Go, Rust, Java, Ruby, PHP, or TypeScript.
• Strong Linux experience (Debian or Ubuntu preferred).
• Excellent problem-solving, troubleshooting, and communication skills.
• Self-motivated, accountable, and comfortable working in a globally distributed team.

Benefits

• Distributed Work: A globally remote environment with twice-yearly in-person team sprints.
• Professional Development: Annual learning and development budget of $2,000 USD.
• Compensation: Competitive base pay with annual reviews and performance-driven bonuses.
• Wellness: Team Member Assistance Program and wellness platform.
• Travel: Opportunities for international travel to meet colleagues, including travel upgrades for long-haul company events.
• Leave: Annual holiday leave, plus maternity and paternity leave.