Security Software Engineer

JobCubby; Canada; Hybrid; CAD 120,000 - 180,000; Full time

Benefits offered by this job

USD 2,000 learning budget

Global travel opportunities

Team sprints in person twice a year

Annual compensation reviews

Job summary

JobCubby partner company is seeking a Security Software Engineer in Canada to embed security within software teams and influence secure design, testing, and maintenance across products.

You will work with Linux/open source ecosystems, perform threat modeling, reviews, static analysis, fuzzing, and vulnerability response, and support security certifications. Travel may be required.

Qualifications

• Undergraduate degree in Computer Science, STEM, or a related field.
• Strong academic performance and a history of exceeding expectations.
• Thorough understanding of common software security vulnerabilities and remediation.
• Experience acting as a security champion across engineering teams.
• Proficiency in C, C++, Python, Go, Rust, JavaScript/TypeScript.
• Practical Linux experience, Debian/Ubuntu preferred.
• Familiarity with open source workflows and communities.
• Excellent English communication skills.
• Willingness to travel internationally at least twice per year.
• Linux kernel development is a plus.

Responsibilities

• Define, implement, test, and document security features across products.
• Lead security initiatives within product engineering teams.
• Analyze, reproduce, remediate, and test vulnerabilities in open source Linux.
• Conduct source code audits and security analysis for remediation.
• Apply threat modeling, architecture reviews, static analysis, fuzzing, and assessments.
• Contribute to Ubuntu and upstream open source projects.
• Integrate security tools into pipelines and engineering infra.
• Develop hardening automation for Linux environments.
• Support security certifications and external standards.
• Provide security guidance to other engineering teams.
• Monitor threats and trends; travel as required.

Skills

C/C++

Python

Go

Rust

JavaScript/TypeScript

Security engineering

Open source

English communication

Education

Bachelor's degree in CS or related field

Tools

Linux kernel development

OpenSSL/Libgcrypt

Security tooling

Linux (Debian/Ubuntu)

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Software Engineer based in Canada. This role offers the opportunity to embed security expertise directly within software engineering teams and influence how products are designed, developed, tested, and maintained. You will combine software engineering with proactive security practices such as threat modeling, architecture reviews, static analysis, fuzzing, and vulnerability response. The position covers the full product security lifecycle, from developing secure features and hardening systems to investigating vulnerabilities and supporting security certifications. You will work extensively with Linux and open-source technologies while contributing to upstream projects and strengthening security across complex software ecosystems. The role involves close collaboration with engineers, customers, partners, and open source communities to establish robust security practices and solutions. You will have opportunities to work with technologies spanning Linux cryptography, security automation, vulnerability assessment, and low-level system components. This position is ideal for a highly motivated security-focused engineer who combines strong technical skills with curiosity, accountability, and a passion for open source.

Accountabilities

• Define, implement, test, and document security features and capabilities across software products.
• Lead security-focused initiatives within product engineering teams and promote secure development practices throughout the software development lifecycle.
• Analyze, reproduce, remediate, and test vulnerabilities affecting open source software and Linux-based systems.
• Conduct source code audits and security analysis to identify vulnerabilities and recommend effective remediation strategies.
• Apply security engineering techniques including threat modeling, architecture and design reviews, tabletop exercises, static analysis, fuzzing, and proactive security assessments.
• Contribute to Ubuntu and upstream open source projects to improve security and support the broader open source community.
• Integrate security tools into engineering infrastructure, development pipelines, and operational processes.
• Develop and maintain hardening automation and security capabilities for Linux environments.
• Enhance Linux cryptographic components to support country-specific compliance and certification requirements, including FIPS and Common Criteria.
• Collaborate with external partners on security standards and Center for Internet Security benchmarks.
• Support the achievement and maintenance of relevant security certifications.
• Provide technical guidance and security best-practice support to other engineering teams.
• Monitor emerging security threats, technologies, vulnerabilities, and industry trends and incorporate relevant developments into engineering practices.
• Participate in international team events and other required travel at least twice per year.

Requirements

• Undergraduate degree in Computer Science, STEM, or a related field, or a compelling alternative professional and technical background.
• Strong academic performance and a demonstrated history of exceeding expectations.
• Thorough understanding of common software security vulnerabilities, attack categories, and appropriate remediation techniques.
• Solid knowledge of modern software engineering practices and secure software development lifecycle principles.
• Experience acting as a security champion or driving security initiatives across engineering teams.
• Proficiency in at least one programming language such as C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/TypeScript.
• Practical experience with Linux, preferably Debian or Ubuntu-based environments.
• Familiarity with open source development tools, workflows, methodologies, and community practices.
• Strong understanding of security engineering principles and the ability to apply them throughout product development.
• Excellent written and spoken English communication skills.
• Strong interpersonal, presentation, and collaboration skills, with the ability to influence technical teams effectively.
• High levels of curiosity, flexibility, accountability, self-motivation, and personal initiative.
• Results-oriented mindset with a strong commitment to delivering against agreed objectives.
• Willingness and ability to work effectively in a globally distributed environment and travel internationally at least twice per year.
• Experience with Linux kernel development is an advantage.
• Knowledge of FIPS, Common Criteria, security certifications, OVAL, OpenSSL, Libgcrypt, or low-level Linux cryptographic APIs is a plus.
• Experience with performance engineering, security tooling, or vulnerability assessment is beneficial.
• Demonstrated ability to learn quickly and adapt to new technologies is highly valued.

Benefits

• Compensation based on geographical location, experience, and performance.
• Annual compensation review, with additional reviews where appropriate for graduates and associates.
• Performance-driven annual bonus.
• Distributed work environment with twice-yearly in-person team sprints.
• USD 2,000 annual personal learning and development budget.
• Recognition and performance rewards.
• Annual holiday leave.
• Maternity and paternity leave.
• Employee Assistance Programme.
• Opportunities to travel internationally and meet colleagues across global teams.
• Priority Pass and travel upgrades for eligible long-haul company events.
• Hands-on exposure to Linux security, open source software, cryptography, vulnerability response, security automation, and secure software engineering.
• Opportunities to contribute to upstream open source projects and collaborate with engineers, customers, partners, and security communities worldwide.