Linux Cryptography and Security Engineer at Canonical

Role overview

Canonical’s security hardening team works on cryptographic components, certifications and automated checks for Ubuntu. The posting names OpenSSL, Libgcrypt, GnuTLS, FIPS, Common Criteria and security benchmarks.

Responsibilities

• Extend Linux cryptography libraries and related components for required certification features.
• Work with external consultants to validate kernel and cryptographic modules.
• Develop hardening benchmarks, audit tools and remediation automation with partners.
• Contribute fixes upstream and coordinate with engineers to resolve security issues on schedule.

Qualifications

• Hands-on Linux cryptography APIs, debugging, C development and secure coding fundamentals.
• Linux administration, shell scripting and experience working with open-source libraries.
• Clear written and spoken communication for remote work with internal and external partners.
• Useful additional experience includes FIPS or Common Criteria, CIS or DISA-STIG benchmarks, Linux kernel work, Python, OVAL or Ansible.

Technology in this role

• Python: Useful additional experience includes FIPS or Common Criteria, CIS or DISA-STIG benchmarks, Linux kernel work, Python, OVAL or .
• Linux: Extend Linux cryptography libraries and related components for required certification .
• C: Hands-on Linux cryptography APIs, debugging, C development and secure coding .
• Ansible: Useful additional experience includes FIPS or Common Criteria, CIS or DISA-STIG benchmarks, Linux kernel work, Python, OVAL or .

Role-specific candidate guide

Preparation notes based on the employer’s stated responsibilities and qualifications.

Understanding the scope. This Linux Cryptography and Security Engineer position at Canonical is best assessed through the work described in the employer’s posting, rather than the title alone. The available role overview says: “Canonical’s security hardening team works on cryptographic components, certifications and automated checks for Ubuntu. The posting names OpenSSL, Libgcrypt, GnuTLS, FIPS, Common Criteria and security benchmarks.” Read that statement together with the responsibilities below to understand the likely balance between delivery, coordination and technical decision-making. The role belongs to the security area, but that label is only a guide to the work; the employer’s own requirements remain decisive. Before applying, check the original listing for reporting lines, product or team assignment, employment terms and any details that may have changed since this copy was checked. Where this page says a fact is not specified, treat it as an open question rather than an implied promise.

What the responsibilities signal. The posting specifically names “Extend Linux cryptography libraries and related components for required certification features.”; “Work with external consultants to validate kernel and cryptographic modules.”; “Develop hardening benchmarks, audit tools and remediation automation with partners.”. For each duty, identify a project where you performed comparable work and be ready to describe the context, your own contribution, constraints, decisions, and measurable result. Explain how you moved from the initial need to implementation, review, release or operational follow-through, where those stages apply. If the work involved other teams or users, distinguish your decisions from the group’s contribution. Avoid presenting a technology keyword as proof by itself: connect it to the problem you solved, the scale or complexity involved, and what changed after your work. The source may contain additional duties; review it directly before preparing your application.

How to read the requirements. The listed qualifications include “Hands-on Linux cryptography APIs, debugging, C development and secure coding fundamentals.”; “Linux administration, shell scripting and experience working with open-source libraries.”; “Clear written and spoken communication for remote work with internal and external partners.”. Mark each requirement as demonstrated, adjacent experience or a genuine gap, then use a concise example for the first two categories. A strong example explains what you personally owned, how you made trade-offs, how you validated the result and what you learned. If the posting specifies years of experience, language ability, certifications, location or eligibility, address those facts plainly in your CV or application rather than relying on the employer to infer them. Do not claim a qualification from exposure alone. For a requirement you do not meet, describe relevant transferable experience accurately and ask the recruiter whether it is mandatory.

Technology and working evidence. The technology terms associated with this listing are Python, Linux. Treat this as a set of posting-derived signals, not a guarantee that every tool is used daily or that the list is complete. For each term relevant to your experience, prepare one concrete example: the system or workflow, the part you owned, the alternatives considered, and how you tested reliability, security, performance or usability as appropriate. If you have not used a named tool, explain the.

Benefits

• We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
• Distributed work environment with twice-yearly team sprints in person - we’ve been working remotely since 2004!
• Personal learning and development budget of USD 2,000 per year
• Opportunity to travel to new locations to meet colleagues from your team and others
• Priority Pass for travel and travel upgrades for long haul company events

About Canonical

Canonical publishes Ubuntu and develops open-source software for cloud, connected devices and enterprise infrastructure. Its teams work across countries.

Browse job categories

Related jobs

• Senior Embedded Security Engineer (Linux/Android) — Bosch
• Senior Embedded Security Engineer – Linux / Android Platforms — Bosch
• Senior Embedded Security Engineer – Linux / Android Platforms — Bosch
• Cloud Infrastructure Security Engineer at Runpod — Runpod
• Graduate Software Engineer, Open Source and Linux at Canonical — Canonical
• Security Engineer at Deepgram — Deepgram