Job Description

This is an exciting opportunity for a software security engineer passionate about open source software and Ubuntu. Come build a rewarding, meaningful career working with the best and brightest people in technology at Canonical, the growing international software company behind Ubuntu.
What you'll do:
o Follow security-related mailing lists and other sources of information about emerging vulnerabilities, and promptly assess their impact on Ubuntu
o Keep track of vulnerabilities in Ubuntu releases as they are discovered, researched and fixed (using internal software tools)
o Analyze, fix, and test vulnerabilities in Ubuntu packages
o Collaborate with other teams in the Ubuntu community and with upstream developers where appropriate, to exchange or develop vulnerability patches and make sure that Ubuntu includes the very best security features
o Participate in the development of proactive security features in Ubuntu
o Occasionally audit source code for vulnerabilities
o Provide guidance and assist with projects across Ubuntu and Canonical to ensure secure coding practices are followed
o Resolve issues raised by end users and commercial support customers
Who you are:
o You have a strong grasp of Linux security technologies
o You have a thorough understanding of the common categories of security vulnerabilities and techniques for fixing them
o You are familiar with coordinated disclosure practices
o You are familiar with open source development tools and methodologies
o You have a strong technical knowledge of Ubuntu, with the capacity to learn about new systems and techniques quickly
o You are skilled in C, Python, and other programming languages
o You can develop automated regression tests, preferably with PyUnit
o You have excellent logic, problem-solving, troubleshooting, and decision-making skills
o You can clearly and effectively communicate with the team and Ubuntu community members
o You have excellent online communications skills, including IRC, email, and other online venues
o You can communicate security information in a positive and collaborative manner
o You can be productive in a globally distributed team through self-discipline and self-motivation
o You have 2+ years security experience, open source security experience preferred
See more
Role tech stack
Python


C++


Linux