Secure Software Development Expert

• As a key member of the engineering team, this position focuses on implementing and maintaining cutting-edge security features.
• The successful candidate will be responsible for driving security initiatives within product development teams, ensuring that our products are robust and resilient against potential threats.

This role involves working closely with cross-functional teams to design, develop, and deploy secure software solutions. We are seeking an exceptional security-focused software engineer who is passionate about staying up-to-date with the latest advancements in the field and can effectively collaborate with others to achieve shared goals.

Responsibilities include:

• Defining, implementing, and documenting new security features to enhance the overall security posture of our products.
• Leading security-focused initiatives within product engineering teams, ensuring that our products meet or exceed industry standards for security and compliance.
• Analyzing, fixing, and testing vulnerabilities in open source software to minimize risk and ensure smooth operation.
• Contributing to Ubuntu and upstream open source projects to benefit the community and stay at the forefront of innovation.
• Auditing and analyzing source code for vulnerabilities, providing actionable recommendations for improvement.
• Integrating new tools into our security infrastructure, pipelines, and processes to maintain operational efficiency.
• Achieving and retaining various security certifications to demonstrate expertise and commitment to excellence.
• Extending and enhancing Linux cryptographic components to meet country-specific compliance requirements, ensuring seamless integration with existing systems.
• Working with external partners to develop Center for Internet Security (CIS) benchmarks, promoting collaboration and knowledge sharing.
• Designing and developing hardening automation for Ubuntu, streamlining security processes and reducing manual labor.

We are seeking a highly skilled and motivated individual with a strong academic background in computer science or a related field. The ideal candidate will possess:

• An excellent academic track record from both high school and university, demonstrating intellectual curiosity and dedication.
• Undergraduate degree in Computer Science or STEM, or a compelling narrative about alternative educational paths.
• A proven track record of going above and beyond expectations, showcasing initiative and drive.
• Thorough understanding of common security vulnerabilities and their fixes, ensuring effective mitigation strategies.
• Knowledge of modern software engineering techniques, including best practices for secure coding and design.
• Familiarity with open source development tools and methodologies, enabling seamless collaboration and contribution.
• Skill in one or more of C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/TypeScript, depending on project requirements.
• Experience as a security champion, demonstrating leadership and advocacy skills.
• Experience driving security within a wider SSDLC process, ensuring comprehensive security coverage.
• Professional written and spoken English, facilitating effective communication and collaboration.
• Experience with Linux (Debian or Ubuntu preferred), ensuring familiarity with operating system intricacies.
• Excellent interpersonal skills, curiosity, flexibility, and accountability, fostering teamwork and cooperation.
• Passion, thoughtfulness, and self-motivation, driving personal growth and professional development.
• Excellent communication and presentation skills, enabling effective stakeholder engagement and project success.
• Results-oriented, with a personal drive to meet commitments, ensuring timely delivery and satisfaction.