Ubuntu Security Engineer

About the role

Join a globally distributed security engineering team dedicated to protecting users and strengthening the security of open source software. You’ll investigate emerging vulnerabilities across the Ubuntu ecosystem, helping identify, assess, remediate, and document security issues.

Key responsibilities

• Analyse, investigate, fix, and test vulnerabilities affecting open source packages within the Ubuntu ecosystem.
• Monitor and track vulnerabilities as they are discovered, researched, patched, and released, using internal security tools and processes.
• Collaborate with internal engineering teams, upstream developers, and the wider open source community to develop, exchange, and validate effective security patches.
• Audit source code and software components to identify security weaknesses and potential vulnerabilities.
• Assess security risks and contribute to prioritising remediation efforts based on impact and urgency.
• Design and develop features, automation, and internal tools that help engineering teams improve the security of their products and infrastructure.
• Document security findings, remediation activities, and relevant technical information clearly and accurately.
• Contribute to security initiatives across the broader open source ecosystem and engage with industry communities where appropriate.
• Work effectively within a globally distributed team, taking ownership of projects and maintaining consistent progress with a high degree of autonomy.

Required profile

• Strong understanding of common software security vulnerabilities, attack techniques, and approaches to identifying and fixing them.
• Experience or familiarity with coordinated vulnerability disclosure practices and responsible security communication.
• Familiarity with open source development tools, workflows, and methodologies.
• Proficiency in at least one relevant programming language, such as C, Python, Go, Rust, Java, Ruby, PHP, JavaScript, or TypeScript.
• Experience with Linux, ideally Ubuntu or Debian-based environments.
• Strong analytical, logical reasoning, troubleshooting, and decision‑making abilities.

Required skills

• C
• Python
• Go
• Rust
• Java
• Ruby
• PHP
• JavaScript
• TypeScript
• Linux
• Ubuntu
• Debian
• Vulnerability analysis
• Coordinated vulnerability disclosure
• Open source development tools