Remote opportunity at
CanonicalUbuntu Security Engineer
This full-time, globally remote Ubuntu Security Engineer role sits within the Ubuntu Security Team at Canonical, which publishes Ubuntu. The team covers many ecosystems and environments,…
Career Tools
About This Role
This full-time, globally remote Ubuntu Security Engineer role sits within the Ubuntu Security Team at Canonical, which publishes Ubuntu. The team covers many ecosystems and environments, and the engineer helps protect open-source communities and Ubuntu users against new threats. Candidates are considered at all levels, from graduate to senior. The engineer keeps watch on, triages, responds to and documents both new and known vulnerabilities in open-source software. Responsibilities include investigating,…
Job Description
This full-time, globally remote Ubuntu Security Engineer role sits within the Ubuntu Security Team at Canonical, which publishes Ubuntu. The team covers many ecosystems and environments, and the engineer helps protect open-source communities and Ubuntu users against new threats. Candidates are considered at all levels, from graduate to senior.
The engineer keeps watch on, triages, responds to and documents both new and known vulnerabilities in open-source software. Responsibilities include investigating, patching and verifying weaknesses in open-source packages, tracking issues across the Ubuntu ecosystem with internal tools, and exchanging or developing patches with other Ubuntu teams and upstream developers. The role also involves auditing source code and building features and tools that help teams strengthen their products.
The work is engineering-focused but may also include security assessments, code reviews, internal tooling, time spent with open-source communities and at industry events. Trips abroad, typically about a week each, happen at least twice annually. The role calls for self-discipline and self-motivation in a globally distributed team.
The posting asks for a solid understanding of common vulnerability categories and their fixes, familiarity with coordinated disclosure and open-source development practices, and working fluency in any of Java, Ruby, PHP, Rust, Go, Python, C or JavaScript/TypeScript. Experience with Linux, ideally Debian or Ubuntu, and strong problem-solving and communication skills are expected.
Responsibilities
- Investigate, patch and verify weaknesses in open-source packages
- Follow vulnerabilities across the Ubuntu ecosystem from discovery to fix
- Work with Ubuntu community members and upstream maintainers on patches
- Audit source code for security issues
- Build features and tools that strengthen team products and Ubuntu security
- Produce security assessments and take part in code reviews when needed
Requirements
- Thorough understanding of common vulnerability categories and how to fix them
- Familiarity with coordinated disclosure practices
- Comfort with the tools and practices common in open-source development
- Working fluency in any of Java, Ruby, PHP, Rust, Go, Python, C or JavaScript/TypeScript
- Sharp reasoning, plus skill at solving problems, troubleshooting and making decisions
- Clear communication with team members and the Ubuntu community
- Linux experience, with Debian or Ubuntu a plus
- Travel abroad at least twice annually
Qualifications
- Self-discipline and self-motivation in a distributed team
- Comfort working with diverse, multinational colleagues
Core Skills
Benefits
- Distributed work with twice-yearly in-person team sprints
- Priority Pass access and upgrades on long-haul trips to company events
- A USD 2,000 yearly allowance for personal learning and development
- Annual compensation review and recognition rewards
- Maternity and paternity leave, plus annual holiday leave
- Employee assistance program and a wellness platform
- Chances to visit new locations and meet colleagues in person
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this role based?
The role is globally remote and open worldwide.
Which experience levels are considered?
The posting says candidates are considered at all levels, from graduate to senior.
How much travel is expected?
Trips abroad happen at least twice annually, typically lasting about a week.
What is the employment type?
The position is full-time.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.