Company Info
Large organization
200 + Employees
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis.
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence – in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
1). Security Software Engineer
Location: Lagos
Description
- This is a general track for security-focused engineering in every team at Canonical, across all levels of seniority. Apply here if you are already an exceptional security-focused software engineer.
- Most product engineering teams at Canonical include one or two spaces for dedicated security-oriented software engineers.
- Their role is to challenge the entire team to think more deeply about security. They contribute to the product as engineers too, but their primary focus is to improve security through state of the art practices – from table-top threat model exercises to architecture reviews, from extended security testing with fuzzers and static analysis tools to external security analyst liaison.
- We also build a number of products that are entirely motivated by security technology and requirements, such as our AppArmor kernel investments and our hardening, compliance and certification toolkits for Ubuntu.
- As the publisher of Ubuntu we also handle long-term security response and hardening for the entire operating system and open source universe. Working with tens of thousands of upstreams means that we need to be fluent in every major programming language, and design, build and adopt sophisticated tools that enable us to work at scale and speed with confidence.
- These roles encompass all aspects of product security, including feature development, vulnerability response, proactive security and open source community participation. All security roles interact closely with many of the other Canonical engineering and development teams, Canonical customers and our partners across the open source community.
- We have open roles for security specialist software engineers in every timezone.
Responsibilities
Security roles might tackle any of the following:
- Define, implement and document new security features
- Lead security-oriented thinking in a product engineering team
- Analyze, fix, and test vulnerabilities in Canonical and open source Software
- Contribute to Ubuntu and upstream projects to benefit the community
- Audit and analyze source code for vulnerabilities
- Integrate new tools in our security infrastructure, pipelines and processes
- Achieve and retain various security certifications
- Extend and enhance Linux cryptographic components – specifically with modules such as OpenSSL/Libgcrypt – with the features and functionality required for country-specific compliance such as FIPS and CC certification
- Work with external partners to develop CIS benchmarks
- Design and develop hardening automation for Ubuntu
- Monitor the security industry for new developments
- Develop, test and maintain new software capabilities
- Provide guidance and support to other engineering teams
Requirements
What we are looking for in you:
- An exceptional academic track record from both high school and university
- Undergraduate Degree in Computer Science or STEM, or a compelling narrative about your alternative path
- Drive and a track record of going above-and-beyond expectations
- A thorough understanding of the common categories of security vulnerabilities
- Modern engineering techniques to find and fix them
- Familiarity with open source development tools and methodologies
- Skill in one or more of C, Python, Go, Rust, Java, Ruby or PHP
- Experience as a security champion
- Experience driving security within a wider SDLC process
- Professional written and spoken English
- Experience with Linux (Debian or Ubuntu preferred)
- Excellent interpersonal skills, curiosity, flexibility, and accountability
- Passion, thoughtfulness, and self-motivation
- Excellent communication and presentation skills
- Result-oriented, with a personal drive to meet commitments
- Ability to travel twice a year, for company events up to two weeks each
Optional skills we also value:
- Clear and effective communication with the team and Ubuntu community members
- Experience working with Linux Kernel
- Security Certification experience and knowledge in FIPS and/or CC
- Experience with OVAL (Open Vulnerability Assessment Language)
- Knowledge of and familiarity with low-level Linux cryptography APIs
- Demonstrated high learning ability
- Performance engineering experience
What we offer you
- We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance.
- In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
- Distributed work environment with twice-yearly team sprints in person
- Personal learning and development budget of USD 2,000 per year
- Annual compensation review
- Recognition rewards
- Annual holiday leave
- Maternity and paternity leave
- Employee Assistance Programme
- Opportunity to travel to new locations to meet colleagues
- Priority Pass, and travel upgrades for long haul company events.
Application Closing Date
Not Specified.
====
===
2). Linux Cryptography and Security Engineer
Location: Lagos
Description
- This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant to international information security standards such as FIPS 140-3 and Common Criteria.
- You will use your applied cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and work with organizations such as DISA and CIS to draft and implement security hardening benchmarks for Ubuntu.
- As a member of the Security Hardening team you will work with and develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance.
- You will interact with internal and external stakeholders to identify gaps in our frameworks, and develop new solutions to address these challenges.
- In this role you will have the opportunity to influence team and security culture, facilitate technical delivery, and help drive team direction and execution.
- You’ll collaborate closely with Canonical’s kernel team as well as the wider engineering organization to drive features impacting all Ubuntu users.
Responsibilities
Day-to-day responsibilities:
- Collaborate with other engineers in the Security Hardening team to achieve and retain various Security certifications
- Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, and others) with the features and functionality required for FIPS and CC certification
- Collaborate with external security consultants to test and validate kernel and crypto module components
- Work with external partners to develop security hardening benchmarks and audit + remediation automation for Ubuntu
- Contribute to Ubuntu mainline and upstream projects to land solutions and benefit the community
- Communication and collaboration within and outside Canonical to identify opportunities to improve our security posture, rapidly resolve issues, and deliver high-quality solutions on schedule
Requirements
What we are looking for in you:
- Hands-on experience with low-level Linux cryptography APIs and debugging
- Excellent software engineering fundamentals, including prior experience with C development, and the ability to demonstrate such
- Hands-on experience with Linux system administration and shell scripting
- Demonstrated knowledge of security and cryptography fundamentals + direct experience writing secure code and implementing best practices
- Significant development experience working with open source libraries
- Excellent verbal and written communications to enable efficient collaboration with internal and external partners in a remote-first environment
Additional skills that you might also bring:
- Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards
- Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code)
- Experience working directly with Linux Kernel
- Prior experience with Python, OVAL (Open Vulnerability Assessment Language), and Ansible
- History of contributions to open source projects
What we offer you
- We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance.
- In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
- Distributed work environment with twice-yearly team sprints in person – we’ve been working remotely since 2004!
- Personal learning and development budget of USD 2,000 per year
- Annual compensation review
- Recognition rewards
- Annual holiday leave
- Maternity and paternity leave
- Employee Assistance Programme
- Opportunity to travel to new locations to meet colleagues from your team and others
- Priority Pass for travel and travel upgrades for long haul company events
Application Closing Date
Not Specified.
===
===
3). Security Engineer – Ubuntu
Location: Lagos
Description
- This is an exciting opportunity to join an industry leading software security team, and help protect the open source community and Ubuntu users from emerging threats. Canonical is building a team to provide security coverage across a wide range of different ecosystems and environments, and work to make the world a better, safer place.
- As part of the Ubuntu team, you will work with the best and brightest people in technology to monitor, triage, respond to and document new and existing vulnerabilities in open source software.
- The role will involve collaboration with internal teams and external partners, to identify and prioritize issues and track progress.
- The role can also include a number of other activities, including security assessment and code review, internal tooling developments, community engagement, security hardening and feature development and industry collaboration participation.
- This job involves international travel several times a year, usually for one week and requires the ability to be productive in a globally distributed team through self-discipline and self-motivation.
Responsibilities
What you’ll do:
- Analyze, fix, and test vulnerabilities in Ubuntu packages
- Keep track of vulnerabilities in Ubuntu releases as they are discovered, researched and fixed (using internal software tools)
- Collaborate with other teams in the Ubuntu community and with upstream developers where appropriate, to exchange or develop vulnerability patches and make sure that Ubuntu includes the very best security features
- Audit source code for vulnerabilities
Requirements
Who you are:
- You have a thorough understanding of the common categories of security vulnerabilities and techniques for fixing them
- You are familiar with coordinated disclosure practices
- You are familiar with open source development tools and methodologies
- You are skilled in one or more of C, Python, go, Rust, Java, Ruby or PHP
- You have excellent logic, problem-solving, troubleshooting, and decision-making skills
- You can clearly and effectively communicate with the team and Ubuntu community members.
Application Closing Date
Not Specified.
How to Apply: Interested and qualified candidates should use the links below to apply: