over 1 year ago
Remote, WorldwideMid Level
H1B sponsor
Responsibilities
- Analyze, fix, and test vulnerabilities in Ubuntu packages.
- Track vulnerabilities across Ubuntu releases using internal software tools.
- Collaborate with Ubuntu teams, the Ubuntu community, upstream developers, and external partners on vulnerability patches and security features.
- Audit source code for vulnerabilities.
- Monitor, triage, respond to, and document new and existing open source software vulnerabilities.
- Conduct security assessments, develop internal tooling, engage with the community, harden software, develop features, and participate in industry collaboration.
Requirements
- Thorough understanding of common security vulnerability categories and remediation techniques.
- Familiarity with coordinated disclosure practices and open source development tools and methodologies.
- Proficiency in one or more of C, Python, Go, Rust, Java, Ruby, or PHP.
- Experience with Linux, preferably Debian or Ubuntu.
- Strong logic, problem-solving, troubleshooting, decision-making, communication, interpersonal, and collaboration skills.
- Ability to work productively in a globally distributed, multicultural, multinational organization.
- Curiosity, flexibility, accountability, thoughtfulness, self-motivation, and a results-oriented approach.
- Ability to travel internationally twice a year for company events lasting up to two weeks.
Benefits
- Worldwide distributed work environment with twice-yearly in-person team sprints.
- USD 2,000 annual personal learning and development budget.
- Annual compensation review and recognition rewards.
- Annual holiday leave and maternity and paternity leave.
- Team Member Assistance Program and Wellness Platform.
- International travel opportunities, including Priority Pass and travel upgrades for long-haul company events.
About Canonical
Canonical publishes Ubuntu, a widely used Linux operating system for servers, cloud, desktops, and edge/IoT, along with tooling for containers, Kubernetes, OpenStack, and AI. It sells enterprise support, security maintenance, managed services, and certifications to businesses, governments, and hardware makers. Founded in 2004 and headquartered in London, the privately held company supplies Ubuntu images and tooling to major public clouds and silicon partners.