Security Software Engineer

Canonical; New York (NY); Remote; USD 120,000 - 160,000; Full time

Job summary

Canonical is seeking a Security Software Engineer to enhance security across all teams. This mid-senior level role involves defining security features, collaborating with engineering teams, and contributing to security-centric products. Candidates should have a strong background in security vulnerabilities and programming languages, along with excellent communication skills.

Benefits

Distributed work environment

Learning and development budget of USD 2,000 annually

Regular compensation reviews and performance bonuses

Travel opportunities and company events

Qualifications

• Strong academic record and degree in Computer Science or STEM.
• Proven drive and exceptional performance.
• Proficiency in English and Linux (Ubuntu preferred).

Responsibilities

• Define, implement, and document security features.
• Identify, fix, and test vulnerabilities.
• Audit source code for vulnerabilities.

Skills

Understanding of security vulnerabilities

Experience with open source tools

Skills in C, Python, Go, Rust, Java, Ruby, PHP

Excellent interpersonal skills

Result-oriented

Education

Degree in Computer Science or STEM

Job description

Join to apply for the Security Software Engineer role at Canonical.

This role is for security-focused engineering across all teams at Canonical, suitable for all levels of seniority. Apply if you are an exceptional security-oriented software engineer.

Product engineering teams typically include security engineers who focus on enhancing security through best practices, architecture reviews, security testing, and liaising with external analysts. Canonical also develops security-centric products like AppArmor and tools for Ubuntu security hardening and compliance.

As the publisher of Ubuntu, Canonical manages security response and hardening for the OS and open source projects, requiring fluency in multiple programming languages and sophisticated security tools.

This role covers all aspects of product security, including feature development, vulnerability response, proactive security measures, and open source community engagement. Collaboration with various engineering teams, customers, and partners is essential.

Location

Open roles are available in every timezone.

What you'll do

1. Define, implement, and document security features.
2. Lead security thinking within product teams.
3. Analyze, fix, and test vulnerabilities.
4. Contribute to Ubuntu and upstream projects.
5. Audit source code for vulnerabilities.
6. Integrate security tools and processes.
7. Achieve and maintain security certifications.
8. Enhance Linux cryptographic modules for compliance.
9. Collaborate with external partners on benchmarks.
10. Develop hardening automation for Ubuntu.
11. Stay updated with security industry developments.
12. Develop, test, and maintain software capabilities.
13. Support other engineering teams.

What we are looking for in you

1. Strong academic background and/or compelling alternative experience.
2. Degree in Computer Science or STEM, or equivalent experience.
3. Drive and a history of exceeding expectations.
4. Deep understanding of security vulnerabilities.
5. Modern techniques for vulnerability mitigation.
6. Experience with open source tools and methodologies.
7. Skills in C, Python, Go, Rust, Java, Ruby, or PHP.
8. Experience as a security champion and in SDLC processes.
9. Proficiency in English.
10. Experience with Linux (Debian/Ubuntu preferred).
11. Excellent interpersonal, curiosity, flexibility, and accountability skills.
12. Passion, thoughtfulness, and self-motivation.
13. Strong communication and presentation skills.
14. Result-oriented with a personal drive to meet commitments.
15. Willingness to travel twice a year for up to two weeks.

Optional skills we value

1. Effective communication with teams and the Ubuntu community.
2. Experience with Linux Kernel.
3. Security certifications like FIPS or CC.
4. Knowledge of OVAL and low-level Linux cryptography APIs.
5. High learning ability and performance engineering experience.

What we offer

Competitive worldwide compensation, annual reviews, performance bonuses, and benefits reflecting our values, including:

• Distributed work environment with biannual in-person sprints.
• USD 2,000 annual learning and development budget.
• Recognition rewards, holiday leave, parental leave, and Employee Assistance Programme.
• Opportunities to travel and meet colleagues.

About Canonical

Canonical pioneers in open source, publishing Ubuntu, a key platform for AI, IoT, and cloud. We recruit globally, uphold high standards, and have been remote-first since 2004. Working here challenges you to think differently and grow professionally.

Canonical is an equal opportunity employer committed to diversity and inclusion.

Additional Information

• Seniority level: Mid-Senior level
• Employment type: Full-time
• Job function: Engineering and IT
• Industry: Software Development