Security Software Engineer

Security Software Engineer role at Canonical, focusing on security.

Job Description

Canonical is seeking a Security Software Engineer to join their team. The engineer will enhance security across various Canonical teams and products. This role involves challenging teams to deepen their understanding of security and improve practices.

The Security Software Engineer will contribute to product development while prioritizing security through threat modeling, architecture reviews, and security testing. They will also work on security-focused products like AppArmor and hardening toolkits for Ubuntu. The role involves security response and hardening for the Ubuntu operating system and open-source projects.

This position requires fluency in programming languages and the ability to develop sophisticated tools for efficient and confident work. The engineer will engage in feature development, vulnerability response, proactive security measures, and open-source community participation. Collaboration with Canonical's engineering teams, customers, and open-source partners is essential.

What this role involves

Define, implement and document new security features
Lead security-oriented thinking in a product engineering team
Analyze, fix, and test vulnerabilities in Canonical and open source Software
Contribute to Ubuntu and upstream projects to benefit the community
Audit and analyze source code for vulnerabilities
Integrate new tools in our security infrastructure, pipelines and processes
Achieve and retain various security certifications
Extend and enhance Linux cryptographic components - specifically with modules such as OpenSSL/Libgcrypt - with the features and functionality required for country-specific compliance such as FIPS and CC certification
Work with external partners to develop CIS benchmarks
Design and develop hardening automation for Ubuntu
Monitor the security industry for new developments
Develop, test and maintain new software capabilities
Provide guidance and support to other engineering teams

Requirements

An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
A thorough understanding of the common categories of security vulnerabilities
Modern engineering techniques to find and fix them
Familiarity with open source development tools and methodologies
Skill in one or more of C, Python, Go, Rust, Java, Ruby or PHP
Experience as a security champion
Experience driving security within a wider SDLC process
Professional written and spoken English
Experience with Linux (Debian or Ubuntu preferred)
Excellent interpersonal skills, curiosity, flexibility, and accountability
Passion, thoughtfulness, and self-motivation
Excellent communication and presentation skills
Result-oriented, with a personal drive to meet commitments
Ability to travel twice a year, for company events up to two weeks each