About the Job:
This is a unique opportunity to leverage your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely while remaining compliant with international information security standards, such as FIPS 140-3 and Common Criteria. You will use your applied cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and work with organizations like DISA and CIS to draft and implement security hardening benchmarks for Ubuntu.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
As a member of the Security Hardening team, your responsibilities will include developing automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance, collaborating with both internal and external stakeholders to identify gaps in frameworks, and developing solutions to address these challenges. You will have the chance to influence team and security culture, facilitate technical delivery, and help drive team direction and execution, while closely collaborating with Canonical's kernel team and the wider engineering organization on features impacting all Ubuntu users.
Day-to-Day Responsibilities:
- Collaborate with other engineers in the Security Hardening team to achieve and retain various security certifications.
- Enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, etc.) for FIPS and CC certification.
- Collaborate with external security consultants to test and validate kernel and crypto module components.
- Work with external partners to develop security hardening benchmarks and audit + remediation automation for Ubuntu.
- Contribute to Ubuntu mainline and upstream projects to land solutions that benefit the community.
- Communicate and collaborate both within and outside Canonical to improve security posture, resolve issues, and deliver high-quality solutions on schedule.
What We Are Looking For:
- Hands-on experience with low-level Linux cryptography APIs.
- Excellent software engineering fundamentals with prior C development experience.
- Experience in Linux system administration and shell scripting.
- Knowledge of security and cryptography fundamentals with experience in writing secure code.
- Significant development experience with open-source libraries.
- Excellent verbal and written communications skills for efficient collaboration in a remote-first environment.
Additional Skills That You Might Also Bring:
- Experience working on FIPS/Common Criteria certified products and knowledge of related standards.
- Familiarity with DISA-STIG or CIS benchmarks and auditing/remediation tooling.
- Experience with Linux Kernel.
- Proficiency in Python, OVAL (Open Vulnerability Assessment Language), and Ansible.
- A history of contributions to open-source projects.
What We Offer You:
- Competitive compensation based on geographical location, experience, and performance.
- Performance-driven annual bonus.
- Personal learning and development budget of USD 2,000 per year.
- Annual compensation review and recognition rewards.
- Annual holiday leave and maternity/paternity leave.
- Employee Assistance Programme.
- Opportunities to travel to new locations to meet colleagues.
- Priority Pass for travel and upgrades for long-haul company events.
About Canonical:
Canonical is a pioneering tech firm at the forefront of the global movement to open source, publishing Ubuntu, one of the world's most significant open source projects. With a fully remote working model since 2004, Canonical fosters a culture of excellence and equal opportunity, celebrating diversity and creating a work environment that leads to better products and outcomes.
