Ubuntu Security Engineer

About the role

We are seeking a Ubuntu Security Engineer to join a globally distributed security engineering team. The role focuses on investigating, assessing, and remediating vulnerabilities across the Ubuntu ecosystem while collaborating with internal and upstream developers. You will contribute to the security of widely used Linux and open‑source projects.

Key responsibilities

• Analyze, investigate, fix, and test vulnerabilities in open‑source packages within Ubuntu.
• Monitor and track vulnerability lifecycle using internal security tools.
• Collaborate with internal engineering teams, upstream developers, and the open‑source community to develop and validate security patches.
• Audit source code and software components to identify security weaknesses.
• Assess risks and help prioritize remediation based on impact and urgency.
• Design and develop automation, features, and internal tools to improve product security.
• Document findings, remediation steps, and technical information clearly.
• Engage with broader open‑source security initiatives and industry communities.

Required profile

• Strong understanding of common software security vulnerabilities and attack techniques.
• Familiarity with coordinated vulnerability disclosure and responsible security communication.
• Experience with open‑source development tools, workflows, and methodologies.
• Proficiency in at least one programming language such as C, Python, Go, Rust, Java, Ruby, PHP, JavaScript or TypeScript.
• Hands‑on experience with Linux environments, preferably Ubuntu or Debian‑based systems.
• Strong analytical, logical reasoning, troubleshooting and decision‑making abilities.

Required skills

• C
• Python
• Go
• Rust
• Java
• Ruby
• PHP
• JavaScript
• TypeScript
• Linux
• Ubuntu
• Debian