This is an exciting opportunity to join an industry-leading software security team and help protect the open-source community and Ubuntu users from emerging threats. Canonical is building a team to provide security coverage across various ecosystems and environments, contributing to a safer world.
As part of the Ubuntu team, you will collaborate with the best and brightest in technology to monitor, triage, respond to, and document vulnerabilities in open-source software. Your role will involve working with internal teams and external partners to identify and prioritize issues and track progress.
The job includes various activities such as security assessment, code review, internal tooling development, community engagement, security hardening, feature development, and participation in industry collaboration. This position involves international travel several times a year, usually for one week, and requires the ability to work effectively in a globally distributed team through self-discipline and self-motivation.
Responsibilities:
- Analyze, fix, and test vulnerabilities in Ubuntu packages.
- Keep track of vulnerabilities in Ubuntu releases as they are discovered, researched, and fixed (using internal software tools).
- Collaborate with other teams in the Ubuntu community and upstream developers to exchange or develop vulnerability patches.
- Audit source code for vulnerabilities.
Requirements:
- Thorough understanding of common security vulnerabilities and techniques for fixing them.
- Familiarity with coordinated disclosure practices.
- Knowledge of open-source development tools and methodologies.
- Proficient in one or more of the following programming languages: C, Python, Go, Rust, Java, Ruby, or PHP.
- Excellent logic, problem-solving, troubleshooting, and decision-making skills.
- Strong communication skills to interact effectively with team members and the Ubuntu community.
Work Conditions:
- Remote work environment.
- International travel required several times a year.
Language Requirements:
- Communication in English is expected.
Canonical is committed to fostering a diverse and inclusive workplace. Applications are welcomed from individuals of all backgrounds and identities.
