Security Software Engineer, Wellington

This is a general track for security-focused engineering in every team at Canonical, across all levels of seniority. Apply here if you are already an exceptional security-focused software engineer. Most product engineering teams at Canonical include one or two spaces for dedicated security-oriented software engineers. Their role is to challenge the entire team to think more deeply about security. They contribute to the product as engineers too, but their primary focus is to improve security through state-of-the-art practices - from tabletop threat model exercises to architecture reviews, from extended security testing with fuzzers and static analysis tools to external security analyst liaison.We build products motivated by security technology and requirements, such as AppArmor kernel investments and hardening, compliance, and certification toolkits for Ubuntu. As the publisher of Ubuntu, we handle long-term security response and hardening for the entire OS and open source universe, working with thousands of upstreams, requiring fluency in major programming languages and sophisticated tools for scalable, confident work.Security roles encompass feature development, vulnerability response, proactive security, and open source community participation. These roles involve collaboration with various internal teams, customers, and community partners. Location: Open roles for security specialist software engineers are available in every timezone.What you'll do Define, implement, and document new security features Lead security-oriented thinking in product engineering teams Analyze, fix, and test vulnerabilities in Canonical and open source software Contribute to Ubuntu and upstream projects Audit and analyze source code for vulnerabilitiesIntegrate new tools into security infrastructure, pipelines, and processes Achieve and maintain security certifications Extend Linux cryptographic components like OpenSSL/Libgcrypt for compliance needs Work with external partners on CIS benchmarks Design and develop hardening automation for UbuntuMonitor security industry developments Develop, test, and maintain new software capabilities Provide guidance and support to other engineering teams What we are looking for in you Exceptional academic record from high school and university or an alternative compelling path Degree in Computer Science or STEM, or equivalent experienceDrive and a track record of exceeding expectations Understanding of common security vulnerabilities and modern fixing techniques Familiarity with open source development tools and methodologies Skills in C, Python, Go, Rust, Java, Ruby, or PHP Experience as a security champion and integrating security into SDLCProfessional English communication skills Experience with Linux (Debian or Ubuntu preferred) Strong interpersonal skills, curiosity, flexibility, accountability Passion, thoughtfulness, self-motivation Excellent communication and presentation skills Result-oriented with personal drive to meet commitmentsAbility to travel twice a year for company events Optional skills we also value Effective communication with team and community Experience with Linux Kernel Security certifications, FIPS, CC knowledge Experience with OVAL Knowledge of Linux cryptography APIs High learning ability Performance engineering experienceWhat we offer you We offer a globally competitive package, including annual reviews, bonuses, benefits, and a focus on personal development, with options for travel, remote work, and more. About Canonical Canonical is a pioneering open source tech firm, the publisher of Ubuntu, leading in AI, IoT, and cloud platforms. We are a remote-first company since 2004, emphasizing excellence, innovation, and diversity.We are an equal opportunity employer, committed to a workplace free from discrimination, welcoming applicants from all backgrounds. #J-18808-Ljbffr