Ubuntu Security Engineer

About the Role

We are representing a partner company based in the United Arab Emirates seeking a Ubuntu Security Engineer to join their globally distributed security engineering team focused on enhancing user protection and securing open source software.

This role involves investigating new vulnerabilities in the Ubuntu ecosystem by identifying, assessing, remediating, and documenting security issues. It combines practical security engineering with software development, code audits, vulnerability research, and the development of security tools.

Collaboration is key, as you'll work closely with internal engineering teams, upstream developers, and the wider open source community to deliver robust security solutions. Your work will directly improve the security and resilience of widely-used Linux systems and open source projects.

The working environment is highly technical, collaborative, globally distributed, and offers opportunities to share knowledge via open source contributions, publications, and industry events. The role welcomes candidates across experience levels, from new graduates to seasoned security engineers, who possess strong technical potential and enthusiasm for security.

Key Responsibilities

• Investigate, analyze, resolve, and validate vulnerabilities affecting open source packages within Ubuntu.
• Monitor and track security vulnerabilities from discovery to patch release using internal security tools and procedures.
• Work with internal teams, upstream developers, and the open source community to design, exchange, and verify security patches.
• Audit source code and software components to uncover security flaws and vulnerabilities.
• Evaluate security risks and assist in prioritizing remediation based on potential impact and urgency.
• Create and enhance features, automation, and internal tools to help engineering teams bolster their product and infrastructure security.
• Maintain clear, accurate documentation of security findings, remediation steps, and technical data.
• Participate in broader open source security initiatives and interact with industry groups as appropriate.
• Operate effectively within a widely distributed team, demonstrating strong ownership and autonomous progress on projects.

Requirements

• Deep understanding of typical software security vulnerabilities, attack methodologies, and mitigation strategies.
• Familiarity with coordinated vulnerability disclosure and responsible security communication.
• Experience with open source development tools, workflows, and practices.
• Proficiency in at least one programming language such as C, Python, Go, Rust, Java, Ruby, PHP, JavaScript, or TypeScript.
• Experience using Linux, preferably Ubuntu or Debian-based systems.
• Strong analytical thinking, logical reasoning, troubleshooting, and decision-making capabilities.
• Excellent communication skills to clearly convey technical security matters to engineers and contributors.
• Collaborative skills with an ability to work effectively across cultures and distributed teams.
• Curious, adaptable, accountable, and passionate about learning emerging security threats and technologies.
• Self-driven and thoughtful approach to managing priorities and independently delivering results.
• A bachelor's degree or equivalent in Computer Science, STEM, or a related field is preferred, though candidates with alternative strong technical backgrounds are encouraged to apply.
• Applications are accepted from a wide range of experience levels, from recent graduates to senior engineers, based on demonstrated skills and relevant security experience.

Benefits

• Competitive salary tailored to location, experience, and performance.
• Annual performance bonus or commission, depending on role and location.
• Yearly salary reviews.
• Personalized annual learning and development budget of USD 2,000.
• Recognition and rewards programs.
• Annual paid holidays.
• Maternity and paternity leave provisions.
• Access to Team Member Assistance and Wellness platforms.
• Fully remote working setup.
• Biannual in-person team gatherings.
• Travel opportunities for international collaboration.
• Priority Pass and travel upgrades for eligible company events requiring long-distance travel.
• Opportunities to contribute to open source security projects and participate in industry events, publications, and initiatives.
• Inclusive and culturally diverse workplace valuing different perspectives and experiences.