Anyone, anywhere in the world can apply.
The role is explicitly listed as 'Worldwide, this is a globally remote role' with hiring across Canonical's distributed global team.
Applies on the original listing · via Jobicy
Who can apply
Read straight from the listing, so you know before you spend time on it.
Anyone, anywhere in the world can apply.
The role is explicitly listed as 'Worldwide, this is a globally remote role' with hiring across Canonical's distributed global team.
Colleagues are distributed across 75+ countries worldwide.
- Async-first
- The listing doesn't promise async-first working.
- Contractor / B2B
- No mention of hiring international contractors or invoicing.
- Global stipend
- Provides a personal learning and development budget of USD 2,000 per year.
- Annual retreat
- Teams meet in person two to four times yearly for international team sprints.
Read from the listing automatically. Always confirm the details with the company before you accept an offer.
About the role
As part of the Ubuntu Security Team, you will monitor, triage, respond to, and document vulnerabilities in open source software. You will collaborate with internal teams, upstream developers, and external partners to remediate security issues, conduct code reviews, and build tools to protect the open source community and Ubuntu users worldwide. The role requires self-motivation in a distributed setting and international travel at least twice a year.
What you'll do
- Analyze, fix, and test vulnerabilities across open source packages and the Ubuntu ecosystem.
- Track vulnerabilities as they are discovered, researched, and remediated using internal tools.
- Collaborate with Ubuntu community members and upstream developers to exchange or build vulnerability patches.
- Audit source code for security vulnerabilities.
- Build tools and features that help teams harden products and contribute to overall Ubuntu security.
What you bring
- Thorough understanding of common security vulnerability categories and remediation techniques.
- Familiarity with coordinated disclosure practices and open source development workflows.
- Proficiency in one or more programming languages: C, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/TypeScript.
- Experience with Linux, ideally Debian or Ubuntu.
- Excellent problem-solving, troubleshooting, and multi-cultural communication skills.
About Canonical
Canonical is the company behind Ubuntu, a leading operating system for cloud, data science, AI, and IoT. Founded in 2004, it operates as a pioneering globally distributed company with more than 1,200 colleagues across 75+ countries.
View Canonical profile & open roles →