Remote Security Software Engineer Job in United States Canonical

Who you are

• Exceptional academic track record
• Undergraduate degree in Computer Science or STEM
• Drive and a track record of going above-and-beyond expectations
• Thorough understanding of common security vulnerabilities categories
• Knowledge of modern engineering techniques to find and fix vulnerabilities
• Familiarity with open source development tools and methodologies
• Skill in one or more of C, Python, Go, Rust, Java, Ruby, or PHP
• Experience as a security champion
• Experience driving security within a wider SDLC process
• Professional written and spoken English
• Experience with Linux (Debian or Ubuntu preferred)
• Excellent interpersonal skills
• Curiosity, flexibility, and accountability
• Passion, thoughtfulness, and self-motivation
• Excellent communication and presentation skills
• Result-oriented with a personal drive to meet commitments
• Ability to travel twice a year for company events

Desirables

• Effective communication with team and Ubuntu community
• Experience with Linux Kernel Security
• Experience and knowledge in FIPS and/or CC certification
• Experience with OVAL
• Familiarity with low-level Linux cryptography APIs
• High learning ability
• Performance engineering experience

What the job involves

• Challenge the team to think more deeply about security and improve it through state-of-the-art practices
• Contribute to products as engineers focusing on security through threat models, architecture reviews, and security testing
• Work on security-focused products like AppArmor kernel investments, compliance, and certification toolkits for Ubuntu and handle long-term security response and hardening for the entire OS and open source universe
• Fluency in major programming languages is necessary, and roles include feature development, vulnerability response, proactive security, and open source community participation
• Roles interact with Canonical engineering teams, customers, partners and involves security certifications, cryptographic components enhancement, hardening automation, security tools integration, industry monitoring, guidance, and support to other teams