Security Software Engineer - remote job

Canonical is hiring a Security Software Engineer. The role sits in IT and programming and is fully remote. The company places no restriction on where the candidate lives, so you can apply from anywhere.

The employer did not publish a figure; that is settled at interview. The advert sets no condition on working hours.

This vacancy passed an automated check: the list excludes any advert requiring a foreign work permit, visa sponsorship, a particular citizenship, or residence in a specific country.

Canonical is a renowned provider of open-source software and operating systems, serving the global enterprise and technology sectors. Our flagship platform, Ubuntu, is extensively utilized in groundbreaking enterprise projects like public cloud, data science, AI, engineering, and IoT. Our customer base includes leading public cloud and silicon providers, as well as industry leaders from various sectors. As a pioneer in global distributed collaboration, we have a workforce of over 1200 colleagues spread across more than 75 countries, with minimal office-based roles. Team meetings occur two to four times annually in diverse locations worldwide, focusing on strategy and execution.

Canonical is a founder-led, profitable, and expanding organization.

We are seeking outstanding security-focused software engineers to integrate into our product teams. While contributing to the product as engineers, their primary role is to enhance the team's security awareness through advanced practices such as threat modeling, tabletop exercises, architectural reviews, static analysis, and fuzzing.

These roles involve a broad spectrum of security-related tasks, including feature development, vulnerability response, proactive security measures, and open-source community engagement. Security engineers collaborate closely with other Canonical teams, customers, and partners within the open-source ecosystem.

Each product engineering team at Canonical has one or two positions reserved for security-oriented software engineers. We also develop several security-driven products, such as AppArmor kernel investments and the Ubuntu Security Guide (USG). As the publisher of Ubuntu, we handle long-term security support for the entire operating system and the broader open-source community. With thousands of upstream projects, we require fluency in multiple programming languages and the ability to design, build, and adopt sophisticated tools to work efficiently at scale.

Apply here if you are an exceptional security-focused software engineer, passionate about open-source software, and enthusiastic about Canonical's products and mission.

This role demands the ability to thrive in a globally distributed team setting, requiring strong self-discipline and motivation. It also involves mandatory international travel at least twice a year, usually for one week.

Location: This is a globally remote position.

Key Responsibilities:

- Define, implement, and document new security features - Lead security-focused initiatives within a product engineering team - Analyze, fix, and test vulnerabilities in open-source software - Contribute to Ubuntu and upstream open-source projects to benefit the community - Audit and analyze source code for vulnerabilities - Integrate new tools into our security infrastructure, pipelines, and processes - Achieve and maintain various security certifications - Extend and enhance Linux cryptographic components to meet specific compliance requirements, such as FIPS and Common Criteria (CC) certifications - Work with external partners to develop Center for Internet Security (CIS) benchmarks - Design and develop hardening automation for Ubuntu - Stay up to date with the latest security industry trends and developments - Develop, test, and maintain new software capabilities - Provide guidance and support to other engineering teams on security best practices

What We Seek in You:

- Exceptional academic credentials from both high school and university - Undergraduate degree in Computer Science or a relevant STEM field, or a compelling narrative about your alternative path - A history of exceeding expectations - In-depth knowledge of common security vulnerabilities and their fixes - Proficiency in modern software engineering techniques - Familiarity with open-source development tools and methodologies - Skill in at least one of the following programming languages: C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/TypeScript - Experience as a security champion - Experience driving security within a broader software development lifecycle (SSDLC) - Professional written and spoken English - Experience with Linux, preferably Debian or Ubuntu - Excellent interpersonal skills, curiosity, flexibility, and accountability - Passion, thoughtfulness, and self-motivation - Strong communication and presentation skills - Results-oriented, with a personal drive to meet commitments

Optional Skills We Value:

- Clear and effective communication with both the team and the Ubuntu community - Experience working with the Linux kernel - Experience with security certifications and knowledge of FIPS and/or Common Criteria (CC) - Experience with OVAL (Open Vulnerability Assessment Language) - Knowledge of cryptographic modules such as OpenSSL and Libgcrypt - Knowledge of low-level Linux cryptography APIs - Demonstrated ability to learn quickly - Performance engineering experience

What We Offer:

We tailor compensation based on geographical location, experience, and performance, with annual reviews to recognize outstanding performance. In addition to base pay, we provide a performance-driven annual bonus. We offer additional benefits that align with our values and ideals, tailored to local needs and ensuring global fairness.

* Distributed work environment with in-person team sprints twice a year * Personal learning and development budget of USD 2,000 per year * Annual compensation review * Recognition rewards * Annual holiday leave * Maternity and paternity leave * Employee Assistance Programme * Opportunity to travel to new locations to meet colleagues * Priority Pass, and travel upgrades for long haul company events

About Canonical:

Canonical is a trailblazer in the tech industry, leading the global shift towards open-source software. As the publisher of Ubuntu, one of the most influential open-source projects and the platform for AI, IoT, and cloud technologies, we are transforming the world daily. We hire globally and maintain high standards for our employees. We expect excellence—only the best will succeed here. Since our inception in 2004, Canonical has been a fully remote company. Working here is a step into the future, challenging you to think differently, work smarter, learn new skills, and raise your game.

Canonical is an equal opportunity employer. We are dedicated to fostering a workplace free from discrimination. Diversity of experience, perspectives, and background creates a better work environment and better products. Regardless of your identity, we will give your application fair consideration.