This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant with international information security standards such as FIPS 140-3 and Common Criteria. You will leverage your applied cryptography, Linux security, and coding skills to enhance the Ubuntu distribution and collaborate with organizations such as DISA and CIS to draft and implement security hardening benchmarks for Ubuntu.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
As a member of the Security Hardening team, you will develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance. You will interact with internal and external stakeholders to identify gaps in our frameworks and develop new solutions. This role allows you to influence team and security culture, facilitate technical delivery, and drive team direction and execution. You'll collaborate closely with Canonical's kernel team and the wider engineering organization to drive features that impact all Ubuntu users.
Day-to-Day Responsibilities:
- Collaborate with the Security Hardening team to achieve various security certifications.
- Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, etc.) for FIPS and CC certification.
- Work with external security consultants to test and validate kernel and crypto module components.
- Collaborate with external partners to develop security hardening benchmarks and audit + remediation automation for Ubuntu.
- Contribute to Ubuntu mainline and upstream projects.
- Communicate and collaborate to identify opportunities to improve security posture and deliver high-quality solutions on schedule.
What We Are Looking For:
- Hands-on experience with low-level Linux cryptography APIs and debugging.
- Excellent software engineering fundamentals, including experience with C development.
- Experience with Linux system administration and shell scripting.
- Knowledge of security and cryptography fundamentals, with experience in writing secure code.
- Significant development experience with open source libraries.
- Excellent verbal and written communication skills for collaboration in a remote-first environment.
Additional Skills That You Might Also Bring:
- Prior experience with FIPS/Common Criteria certified products.
- Experience with DISA-STIG or CIS benchmarks and related audit + remediation tooling.
- Experience working directly with the Linux Kernel.
- Proficiency in Python, OVAL (Open Vulnerability Assessment Language), and Ansible.
- Contributions to open source projects.
What We Offer You:
- Competitive compensation based on geographical location, experience, and performance.
- Performance-driven annual bonus.
- Personal learning and development budget of USD 2,000 per year.
- Annual compensation review and recognition rewards.
- Annual holiday leave, maternity and paternity leave, and Employee Assistance Programme.
- Opportunity for travel to meet colleagues and attend company events.
About Canonical:
Canonical is a pioneering tech firm leading the global move to open source. As the publisher of Ubuntu, we are changing the landscape of technology. We operate on a global scale and uphold high standards for our team. With a remote-first approach since 2004, we challenge our team to think differently, work smarter, and continually develop new skills.
Canonical is an equal opportunity employer and fosters a workplace free from discrimination, valuing diversity of experience, perspectives, and backgrounds.
