This is a unique opportunity to utilize your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant with international information security standards such as FIPS 140-3 and Common Criteria. You will apply your knowledge in cryptography, Linux security, and coding to enhance the Ubuntu distribution and work closely with organizations such as DISA and CIS to draft and implement security hardening benchmarks for Ubuntu.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
As a member of the Security Hardening team, you will develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance. You will interact with both internal and external stakeholders to identify gaps in our frameworks and develop solutions to address these challenges. This role offers an opportunity to influence security culture, facilitate technical delivery, and drive team direction and execution. You'll also collaborate closely with Canonical's kernel team and the broader engineering organization.
Day-to-Day Responsibilities:
- Collaborate with other engineers in the Security Hardening team to achieve and retain various security certifications.
- Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, etc.) for FIPS and CC certification requirements.
- Work with external security consultants to test and validate kernel and crypto module components.
- Collaborate with partners to create security hardening benchmarks and automate audit and remediation processes for Ubuntu.
- Contribute to Ubuntu mainline and upstream projects to benefit the community.
- Engage in communication and collaboration within and outside Canonical to enhance our security posture and deliver high-quality solutions on schedule.
What We Are Looking For:
- Hands-on experience with low-level Linux cryptography APIs and debugging.
- Strong software engineering fundamentals and experience with C development.
- Proficiency in Linux system administration and shell scripting.
- Knowledge of security and cryptography fundamentals, along with experience writing secure code and implementing best practices.
- Significant development experience with open-source libraries.
- Excellent verbal and written communication skills for effective collaboration in a remote-first environment.
Additional Skills That You Might Also Bring:
- Prior experience with FIPS/Common Criteria certified products and related standards.
- Experience working with DISA-STIG or CIS benchmarks, including audit and remediation tooling.
- Familiarity with the Linux Kernel and contributions to open-source projects.
- Experience with Python, OVAL, and Ansible.
Work Conditions:
- Remote work environment with twice-yearly in-person team sprints.
- Personal learning and development budget of USD 2,000 per year.
- Performance-driven annual bonus.
- Recognition rewards and annual compensation reviews.
- Annual holiday leave, maternity and paternity leave, and an Employee Assistance Programme.
- Opportunities for travel to meet colleagues and upgrade travel for long-haul company events.
About Canonical:
Canonical is a pioneering tech firm at the forefront of the global move to open source, known for publishing Ubuntu – a key platform for AI, IoT, and the cloud. The company operates entirely remotely and aims to recruit globally is dedicated to creating a diverse and inclusive workplace. We are proud to provide equal opportunity employment, considering all applications fairly.
