Remote opportunity at
CanonicalSecurity Software Engineer
Canonical is a profitable, founder-led enterprise software provider and the publisher of Ubuntu, powering initiatives in artificial intelligence, cloud computing, and the internet of things. The…
Career Tools
About This Role
Canonical is a profitable, founder-led enterprise software provider and the publisher of Ubuntu, powering initiatives in artificial intelligence, cloud computing, and the internet of things. The company operates globally with a remote-first model, bringing distributed teams together in person multiple times a year for strategy alignment. Canonical is currently looking for security software engineers to embed across product engineering groups. In this capacity, you will divide your time between regular…
Job Description
Canonical is a profitable, founder-led enterprise software provider and the publisher of Ubuntu, powering initiatives in artificial intelligence, cloud computing, and the internet of things. The company operates globally with a remote-first model, bringing distributed teams together in person multiple times a year for strategy alignment. Canonical is currently looking for security software engineers to embed across product engineering groups.
In this capacity, you will divide your time between regular product engineering tasks and driving security practices across the entire team. Your main objective is to encourage deep security thinking through architecture reviews, threat modeling, fuzzing, table-top exercises, and static analysis. You will participate in feature development, proactive security initiatives, vulnerability responses, and open source community engagement. This globally distributed remote role requires high self-discipline, strong motivation, and mandatory international travel approximately twice a year.
Responsibilities
- Design, implement, and document new security features
- Lead security initiatives within a product engineering group
- Analyze, fix, and test open source software vulnerabilities
- Contribute to Ubuntu and upstream open source initiatives
- Conduct code audits and source code security analysis
- Incorporate new tools into security infrastructure, pipelines, and processes
- Achieve and maintain various security certifications
- Enhance Linux cryptographic components for standards like FIPS and Common Criteria
- Collaborate with external partners to build Center for Internet Security benchmarks
- Design and implement hardening automation for Ubuntu
- Monitor security industry trends and developments
- Build, test, and maintain new software capabilities
- Advise and support other engineering units on security best practices
Requirements
- Thorough understanding of common vulnerability categories and remediation methods
- Knowledge of modern software engineering principles
- Familiarity with open source development methodologies and tools
- Proficiency in at least one language among C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/TypeScript
- Prior experience acting as a security champion
- Background driving security within a secure software development lifecycle process
- Professional written and spoken English proficiency
- Experience working with Linux, preferably Debian or Ubuntu
- Strong interpersonal skills, curiosity, flexibility, accountability, and self-motivation
- Ability to be productive in a globally distributed remote team
- Availability for mandatory international travel at least twice per year for about a week each time
Qualifications
- Exceptional academic record from both high school and university
- Undergraduate degree in Computer Science or another STEM field, or a compelling alternative path
- Clear and effective communication skills for teams and community members
- Experience working directly with the Linux kernel
- Familiarity with security certifications including FIPS and Common Criteria
- Knowledge of OVAL
- Familiarity with cryptographic modules like OpenSSL and Libgcrypt
- Understanding of low-level Linux cryptography APIs
- Demonstrated ability to learn quickly
- Performance engineering experience
Core Skills
Benefits
- Globally distributed remote work environment
- Twice-yearly in-person team sprints
- Annual personal learning and development budget of USD 2,000
- Periodic compensation reviews
- Performance-driven annual bonus
- Recognition rewards
- Annual holiday leave
- Maternity and paternity leave
- Employee Assistance Programme
- Priority Pass and travel upgrades for long-haul company events
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote position?
Yes, this is a globally remote role with worldwide availability, though it requires mandatory international travel at least twice a year.
What are the travel requirements for this job?
Team members must travel internationally at least twice a year, typically for one week per trip, to meet with colleagues in person.
What is the salary for this position?
The source posting does not specify the salary for this role.
What qualifications are needed to apply?
Candidates need a strong understanding of security vulnerabilities, knowledge of modern software engineering, proficiency in languages like C, C++, Python, Go, or Rust, and experience with Linux.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.
