Security Software Engineer

Canonical; Boston (MA); Remote; USD 90,000 - 140,000; Full time

Job summary

An innovative company is seeking a Security Software Engineer to enhance security practices across teams. This role involves defining and implementing security features, analyzing vulnerabilities, and collaborating with various teams and open source partners. With a strong focus on modern engineering techniques and a commitment to excellence, this position offers the chance to work on cutting-edge security products and contribute to the open source community. Join a dynamic environment that values diversity and fosters professional growth, where your contributions will make a significant impact on the security landscape.

Benefits

USD 2,000 annual learning budget

Annual pay review and recognition rewards

Comprehensive leave policies including parental leave

Employee Assistance Programme

Travel opportunities and company event upgrades

Qualifications

• Strong academic record and proven drive in security-focused software engineering.
• Experience integrating security in SDLC and familiarity with open source methodologies.

Responsibilities

• Define and implement security features, lead security-focused thinking.
• Analyze and fix vulnerabilities, contribute to Ubuntu and upstream projects.

Skills

C

Python

Go

Rust

Java

Ruby

PHP

Understanding of security vulnerabilities

Modern engineering techniques for security

Excellent English communication skills

Education

Degree in Computer Science/STEM or equivalent experience

Tools

Linux

Open source tools

Job description

Join to apply for the Security Software Engineer role at Canonical.

Get AI-powered advice on this job and more exclusive features.

This is a general track for security-focused engineering across all teams at Canonical, at all levels of seniority. Apply here if you are an exceptional security-focused software engineer.

Most product engineering teams at Canonical include dedicated security-oriented software engineers. Their role is to challenge the team to think more deeply about security and to contribute to the product, focusing on improving security through best practices—ranging from threat modeling and architecture reviews to security testing and external liaison.

We also develop security-centric products like AppArmor, and tools for hardening, compliance, and certification for Ubuntu. As the publisher of Ubuntu, we handle security response and hardening for the OS and open source community, requiring fluency in multiple programming languages and sophisticated security tools.

Roles cover all aspects of product security, including feature development, vulnerability response, proactive security, and community participation. All security roles collaborate with various teams, customers, and open source partners.

Location: Open roles available globally in every timezone.

What you'll do

• Define, implement, and document security features
• Lead security-focused thinking within engineering teams
• Analyze, fix, and test vulnerabilities
• Contribute to Ubuntu and upstream projects
• Audit source code for vulnerabilities
• Integrate security tools into infrastructure and pipelines
• Achieve and maintain security certifications
• Enhance Linux cryptographic components for compliance
• Collaborate with partners on CIS benchmarks
• Design and develop Ubuntu hardening automation
• Monitor industry security developments
• Develop and maintain security software
• Support other engineering teams

What we are looking for in you

• Strong academic record from high school and university
• Degree in Computer Science/STEM or equivalent experience
• Proven drive and exceeding expectations
• Understanding of security vulnerabilities
• Modern engineering techniques for security
• Familiarity with open source tools and development methodologies
• Skills in C, Python, Go, Rust, Java, Ruby, or PHP
• Experience as a security champion
• Experience integrating security in SDLC
• Excellent English communication skills
• Linux experience (Debian/Ubuntu preferred)
• Interpersonal skills, curiosity, flexibility, accountability
• Motivation, thoughtfulness, and self-drive
• Ability to travel twice a year for company events

Optional skills we value

• Effective communication with teams and community
• Linux Kernel experience
• Security certifications (FIPS, CC)
• Experience with OVAL
• Knowledge of Linux cryptography APIs
• High learning ability
• Performance engineering experience

What we offer

• Distributed work with biannual in-person sprints
• USD 2,000 annual learning budget
• Annual pay review and recognition rewards
• Comprehensive leave policies including parental leave
• Employee Assistance Programme
• Travel opportunities and company event upgrades

About Canonical

Canonical pioneers open source technology, publishing Ubuntu, a key platform in AI, IoT, and cloud. We are a remote-first company since 2004, fostering innovation and excellence. We value diversity and are an equal opportunity employer.

Seniority level

• Mid-Senior level

Employment type

• Full-time

Job function

• Engineering and IT

Industries

• Software Development