Security Software Engineer at Canonical

Role overview

Canonical places security-oriented engineers within product teams and also develops security-led products such as AppArmor and Ubuntu Security Guide. The opening is globally remote and involves at least two international trips a year.

Responsibilities

• Design and implement security features and lead threat modelling, design review, static analysis or fuzzing work.
• Find, fix and test vulnerabilities in Ubuntu and upstream open-source software.
• Improve security tooling and automation, including hardening and compliance work such as FIPS, Common Criteria or CIS benchmarks where assigned.
• Advise product teams and work with partners and the open-source community on secure development.

Qualifications

• Understanding of common vulnerability classes, secure software engineering and open-source development methods.
• Programming ability in at least one language listed by the employer, including C, C++, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript.
• Experience promoting security in a wider software development lifecycle, plus Linux familiarity and professional English.
• A computer science or STEM degree, or a compelling alternative route, and the self-discipline to work in a distributed team.

Technology in this role

• Python: Python JavaScript TypeScript Java C++ Linux .
• JavaScript: Python JavaScript TypeScript Java C++ Linux .
• TypeScript: Python JavaScript TypeScript Java C++ Linux .
• Java: Python JavaScript TypeScript Java C++ Linux .
• C++: Python JavaScript TypeScript Java C++ Linux .
• Linux: Python JavaScript TypeScript Java C++ Linux .
• Go: Python JavaScript TypeScript Java C++ Linux .
• C: Python JavaScript TypeScript Java C++ Linux .
• Rust: Programming ability in at least one language listed by the employer, including C, C++, Python, Go, Rust, Java, Ruby, PHP or .
• Ruby: Programming ability in at least one language listed by the employer, including C, C++, Python, Go, Rust, Java, Ruby, PHP or .
• PHP: Programming ability in at least one language listed by the employer, including C, C++, Python, Go, Rust, Java, Ruby, PHP or .

Role-specific candidate guide

Preparation notes based on the employer’s stated responsibilities and qualifications.

Understanding the scope. This Security Software Engineer position at Canonical is best assessed through the work described in the employer’s posting, rather than the title alone. The available role overview says: “Canonical places security-oriented engineers within product teams and also develops security-led products such as AppArmor and Ubuntu Security Guide. The opening is globally remote and involves at least two…” Read that statement together with the responsibilities below to understand the likely balance between delivery, coordination and technical decision-making. The role belongs to the security area, but that label is only a guide to the work; the employer’s own requirements remain decisive. Before applying, check the original listing for reporting lines, product or team assignment, employment terms and any details that may have changed since this copy was checked. Where this page says a fact is not specified, treat it as an open question rather than an implied promise.

What the responsibilities signal. The posting specifically names “Design and implement security features and lead threat modelling, design review, static analysis or fuzzing work.”; “Find, fix and test vulnerabilities in Ubuntu and upstream open-source software.”; “Improve security tooling and automation, including hardening and compliance work such as FIPS, Common Criteria or CIS benchmarks where assigned.”. For each duty, identify a project where you performed comparable work and be ready to describe the context, your own contribution, constraints, decisions, and measurable result. Explain how you moved from the initial need to implementation, review, release or operational follow-through, where those stages apply. If the work involved other teams or users, distinguish your decisions from the group’s contribution. Avoid presenting a technology keyword as proof by itself: connect it to the problem you solved, the scale or complexity involved, and what changed after your work. The source may contain additional duties; review it directly before preparing your application.

How to read the requirements. The listed qualifications include “Understanding of common vulnerability classes, secure software engineering and open-source development methods.”; “Programming ability in at least one language listed by the employer, including C, C++, Python, Go, Rust, Java, Ruby, PHP or JavaScript/TypeScript.”; “Experience promoting security in a wider software development lifecycle, plus Linux familiarity and professional English.”. Mark each requirement as demonstrated, adjacent experience or a genuine gap, then use a concise example for the first two categories. A strong example explains what you personally owned, how you made trade-offs, how you validated the result and what you learned. If the posting specifies years of experience, language ability, certifications, location.

Benefits

• We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
• Distributed work environment with twice-yearly team sprints in person
• Personal learning and development budget of USD 2,000 per year
• Opportunity to travel to new locations to meet colleagues
• Priority Pass, and travel upgrades for long haul company events

About Canonical

Canonical publishes Ubuntu and develops open-source software for cloud, connected devices and enterprise infrastructure. Its teams work across countries.

Browse job categories

Related jobs

• Ubuntu Security Engineer at Canonical — Canonical
• Senior Backend Security Controls Engineer at Horizon3 — Horizon3
• Infrastructure Security Engineer at ElevenLabs — ElevenLabs
• Senior Developer (Windows), Product Security at 1Password — 1Password
• Senior Infrastructure Security Engineer at Zapier — Zapier
• Senior Software Engineer, Security Assurance at Grafana Labs — Grafana Labs