Remote Ubuntu Security Engineer — Open Source Defender

JobCubby; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Fully distributed remote work

Learning budget USD 2,000/year

Annual leave and travel opportunities

Job summary

JobCubby is seeking an Ubuntu Security Engineer to join a globally distributed security team focused on protecting users and strengthening open source software security across the Ubuntu ecosystem.

You will investigate vulnerabilities, develop security patches, and collaborate with internal teams, upstream developers, and the broader community to deliver robust fixes with high autonomy.

Qualifications

• Strong understanding of common software security vulnerabilities and attack techniques.
• Experience with coordinated vulnerability disclosure practices.
• Proficiency in at least one programming language (C, Python, Go, Rust, Java, Ruby, PHP, JavaScript, or TypeScript).
• Experience with Linux, ideally Ubuntu or Debian-based environments.
• Excellent communication and teamwork across cultures and distributed teams.
• Bachelor’s degree or equivalent in CS/STEM preferred.

Responsibilities

• Analyse, investigate, fix, and test vulnerabilities in Ubuntu ecosystem.
• Monitor vulnerabilities as discovered, patched, and released.
• Collaborate with engineers, upstream developers, and the open source community to patch securely.
• Audit source code to identify security weaknesses.
• Design features and tools to improve security of products and infra.
• Document findings and remediation activities clearly.

Skills

Security analysis

Open source collaboration

Cross-cultural teamwork

Effective communication

Education

B.S. in Computer Science or STEM

Tools

Open source development tools

Job description

JobCubby is seeking an Ubuntu Security Engineer to join a globally distributed security team focused on protecting users and strengthening open source software security across the Ubuntu ecosystem.

You will investigate vulnerabilities, develop security patches, and collaborate with internal teams, upstream developers, and the broader community to deliver robust fixes with high autonomy.