As the most widely used Linux distribution, Ubuntu plays a crucial role in the security of the internet. The Engineering Manager for Security Standards and Hardening will directly impact the safety and security of millions of users globally. You will lead a team of security experts tasked with protecting the open-source ecosystem and driving innovation. Your leadership will be vital in addressing emerging threats, developing robust security measures, and maintaining the integrity of Ubuntu. This role involves setting security standards for open-source software across the Ubuntu platform, covering desktops, servers, edge devices, cloud infrastructure, Kubernetes, and OpenStack. Responsibilities include certifying core components to meet industry standards and guiding development teams in security best practices, particularly in cryptographic modules (e.g., FIPS 140) and system hardening, in collaboration with industry partners like CIS and DISA.
Responsibilities:
- Lead and develop a team of engineers, from graduates to seniors.
- Coach, mentor, and provide career development feedback.
- Identify and measure team health indicators.
- Implement disciplined engineering processes.
- Represent your team and product to stakeholders, partners, and customers.
- Develop and promote great engineering and organizational practices.
- Support products and customers to meet strict security requirements (FIPS, CIS, STIG, FedRAMP, and CRA).
- Collaborate on addressing specific cryptography modules (FIPS 140) and system hardening efforts.
Requirements:
- Exceptional academic record in Computer Science or a related STEM field.
- Strong drive and a proven track record of exceeding expectations.
- Excellent verbal and written communication skills in English.
- A passion for developing people and proven experience in that area.
- Strong organizational skills to ensure timely delivery of high-quality results.
- Prior experience with FIPS/Common Criteria certified products and related standards.
- Familiarity with DISA-STIG or CIS benchmarks, including audit and remediation tooling.
- Knowledge and passion for software and application security.
- Solid experience in an agile development environment.
- Willingness to travel twice a year for company events for up to two weeks.
Optional Qualifications:
- Hands-on experience with Linux cryptography libraries (OpenSSL, GnuTLS).
Work Conditions:
- Remote working with twice-yearly in-person team sprints.
- Personal learning and development budget of USD 2,000 per year.
- Annual compensation review and performance-driven bonuses.
- Recognition rewards and annual holiday leave, maternity and paternity leave.
- Employee Assistance Programme and travel opportunities.
About Canonical:
Canonical is a pioneering tech firm leading the global shift to open source. As the publisher of Ubuntu, one of the world’s most significant open-source projects, Canonical is committed to changing the world through innovative technology. The company is remote-first and values diversity and equal opportunity in the workplace.
