Jobs at Canonical

Description

• In security risk management we’re looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling.
• Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do. 
• To support this we need to use industry best practices paired with emerging threat information to to promote risk identification, quantification, impact analysis, and modelling to ultimately drive decision making.
• In this role, you will help establish and execute a broad strategic vision for the security risk program at Canonical.
• You will not only work within the team but also cross-functionally with various teams across the organisation.
• The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks.
• Additionally, the team collaborates with our Organisational Learning and Development team to develop playbooks and facilitate security training across Canonical.
• The security risk management team’s mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem.
• They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.

Responsibilities
What you will do in this role:

• Define Canonical's security risk management  standards and playbooks
• Analyse and improve Canonical's security risk practices
• Evaluate, select and implement new security requirements, tools and practices
• Grow the presence and thought leadership of Canonical security risk management practice
• Develop Canonical security risk learning and development materials
• Work with Security leadership to present information and influence change
• Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs
• Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)
• Participate in risk management, decision-making, and collaborative discussions
• Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes
• Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action
• Develop templates and materials to help with self-service risk management actions 
• Monitor and identify opportunities to improve the effectiveness of risk management processes
• Launch campaigns to perform security assessments and help mitigate security risks across the company
• Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities.

Requirements
What we are looking for:

• An exceptional academic track record 
• Undergraduate Degree in Computer Science or STEM, or a compelling narrative about your alternative path
• Drive and a track record of going above-and-beyond expectations
• Deep personal motivation to be at the forefront of technology security
• Leadership and management ability
• Excellent business English writing and presentation skills
• Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management
• Expertise in threat modelling and risk management frameworks
• Broad knowledge of how to operationalize the management of security risk
• Experience in Secure Development Lifecycle and Security by Design methodology

What we offer you

• We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance.
• In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
• Distributed work environment with twice-yearly team sprints in person
• Personal learning and development budget of USD 2,000 per year
• Annual compensation review
• Recognition rewards
• Annual holiday leave
• Maternity and paternity leave
• Employee Assistance Programme
• Opportunity to travel to new locations to meet colleagues
• Priority Pass, and travel upgrades for long haul company events

go to method of application »

Description

• The Threat Intelligence Lead will own Canonical’s threat intelligence strategy and execution, including understanding of which cyber threat actors are targeting Canonical, and the use of intelligence on Tactics, Techniques and Procedures (TTP) to better our products and internal cybersecurity controls.
• You will collaborate with internal stakeholders as well as with the wider cybersecurity community, making sure that Canonical is recognised as a thought leader on open source threat intelligence.
• This role will report to the CISO.
• You will lead intelligence gathering and development activities on threat actors targeting software supply chains.
• You'll study attack trends across the wider open source software landscape, report findings to internal security teams, and advise the wider engineering community on the best course of action to detect and mitigate possible threats.
• As the publisher of Ubuntu, Canonical products are directly or indirectly present in almost every organisation and household in the world, making them a prime target for threat actors.
• This team's mission is to help Canonical, and by extension countless community members and companies around the world, secure their software infrastructure.

Responsibilities
What you’ll do in this role:

• Build and own Canonical’s threat intelligence strategy
• Build and maintain OSINT research environments
• Develop OSINT tradecraft, principals, and techniques
• Identify and track targeted intrusion cyber threats, trends, and new developments by cyber threat actors through analysis of proprietary and open source datasets 
• Collaborate across teams to inform on activity of interest
• Coordinate adversary/campaign tracking
• Contribute to the wider threat intelligence community, establishing Canonical as a key contributor and thought leader in the space
• Work with product and engineering teams to explain cybersecurity threats and advise on mitigation strategies
• Work with the OPSEC and IS team to help implement/update security controls prioritising cyber defence
• Identify intelligence gaps and propose new tools and research projects to fill them
• Conduct briefings for executives, internal stakeholders and external customers

Requirements
The successful Threat Intelligence Lead will be:

• An experienced threat intelligence leader (or similar)
• Knowledgeable about the current open source threat landscape and computer networking/infrastructure concepts
• Highly competent with OSINT tools (e.g., Buscador, Trace Labs OSINT VM, OSINT Framework, Maltego, Shodan, social media scraping tools, etc.)
• Able to identify, organise, catalogue, and track adversary tradecraft trends — often with incomplete data
• Experienced using threat intelligence data to influence enterprise architecture or product development decisions
• An excellent communicator with the ability to clearly articulate and tailor technical content to a variety of audiences
• Able to travel twice a year, for company events up to two weeks long

Desired Characteristics:

• A professional portfolio of OSINT related scripts, tools, or frameworks
• Demonstrated involvement in the larger OSINT community (please share relevant links)
• Degree qualified, with a bachelor's degree in computer science, information security, or a related field
• Certifications in related areas (e.g. GOSI, SANS SEC487 & SEC587, IntelTechniques OSIP, etc)
• Experience in a tech company or government/military signal intelligence departments

What we offer you

• We consider geographical location, experience, and performance in shaping compensation worldwide.
• We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance.
• In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
• Distributed work environment with twice-yearly team sprints in person
• Personal learning and development budget of USD 2,000 per year
• Annual compensation review
• Recognition rewards
• Annual holiday leave
• Maternity and paternity leave
• Employee Assistance Programme
• Opportunity to travel to new locations to meet colleagues
• Priority Pass, and travel upgrades for long haul company events

go to method of application »

Description

• The Chief of Staff drives improvement in our global support organization. With your insights into engineering, operations and management, you will work with the VP Global Support to identify and deliver initiatives.
• Our company mission is to make open source easy, starting with Ubuntu but extending to the huge array of things that people want to do with open source, from the largest clouds and data centers to the smallest connected devices.
• Our support organisation is the first line and escalation path for our customers across all core products and solutions that Canonical offers.
• We are growing the team as we grow the business, both in terms of the number of people and in terms of the range of technologies and skills we are able to bring to bear on customer problems.
• As open source expands to cover every possible range of industries and use cases, we will build our team to be the best partner for any enterprise that builds on the open software platform.
• We take customer satisfaction seriously, and this role has been created in part to ensure we maintain that focus as we scale. Our culture is that of continuous learning and growth.
• This role reports directly to the VP of Global Support and has executive visibility as a key leader in the company.
• This role will be home based in the Americas or EMEA.

Responsibilities
What your day will look like:

• Work with department leadership to shape long term strategies for the department
• Understand, report and manage organisation and team level KPIs
• Prioritise growth initiatives and safeguard current operations
• Manage the strategic agenda of the leadership team
• Run leadership team meetings
• Ensure a strong, candid team dynamic with productive, professional dialogue
• Be a strategic adviser, confidant and proxy for the VP of Global Support
• Clarify and oversee connection points and initiatives across departments
• Optimise processes by looking for and addressing gaps and inefficiencies
• Travel internationally twice a year for up to straight two weeks for company events

Requirements
What we are looking for in you:

• You are an articulate communicator and master organiser
• You love open source software and working with brilliant people
• You enjoy getting all the details right and running a smooth organisation
• You’re a proven generalist and follow industry trends and new technologies
• You understand and value getting things done the right way 
• You value soft skills and are passionate, enterprising, thoughtful, and self-motivated
• You’ve worked with Linux, with a preference towards Ubuntu
• You are familiar with public and private cloud platforms

What we offer you

• We consider geographical location, experience, and performance in shaping compensation worldwide.
• We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus.
• We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
• Distributed work environment with twice-yearly team sprints in person
• Personal learning and development budget of USD 2,000 per year
• Annual compensation review
• Recognition rewards
• Annual holiday leave
• Maternity and paternity leave
• Employee Assistance Programme
• Opportunity to travel to new locations to meet colleagues
• Priority Pass, and travel upgrades for long haul company events

go to method of application »

Description

• The Security Compliance Engineer works in the office of the CISO in the Risk & Compliance team to help Canonical to achieve overall security & compliance goals and relevant certifications, as well as compliance with regulatory frameworks and other relevant standards.
• The team's role is to ensure that Canonical conducts its business processes in compliance with laws and regulations, internal policies and procedures defined and international standards/best practices.
• This position is for an individual with the knowledge, drive and personal motivation to help build and grow a strong security & compliance governance framework in a fast-growing tech company, as well as help it achieve/maintain the necessary compliance certifications.
• This role can be home or office based. Periodic international travel for training and business meetings is required.

Key Responsibilities

• Collaborate with IT operations, Legal, Security, and Engineering teams to define and implement policies and procedures
• Help to design and implement controls to strengthen the company’s Security Posture
• Collaborate with various teams to ensure security standards are met across all projects
• Assess vulnerabilities/risks that could affect the integrity, availability, or confidentiality of data, systems, or services of the company and provide mitigation solutions
• Conduct regular audits to ensure compliance with internal policies and procedures, relevant security standards best practices, regulations and client requirements to identify gaps and provide remediation solutions
• Ensure controls are configured correctly and integrated into the security strategy
• Collaborate with internal teams to respond to Security Questionnaires, Contract  Compliance and Security & Compliance posture questions from customers
• Provide guidance and support to internal stakeholders regarding security & compliance practices
• Collaborate with internal teams to gather evidence for external audits
• Participate in the creation and or maintenance of the Information Security Management System
• Maintain an up-to-date knowledge on Security standards, best practices and trends to ensure ongoing compliance

Qualifications
Valuable experience:

• Bachelor's Degree (or equivalent) in Computer Science, Information Systems, or related field
• Affinity with Open Source software with regards to compliance
• Knowledge of designing and implementing security processes and solutions with topics ranging from architecture, governance, compliance, and operations
• Technical or engineering background, including software development, scripting, networking, and cloud architecture

Required skills and experience:

• 2+ years of experience within a security and compliance function
• Experience developing and maintaining policies, procedures, standards, and guidelines to align with company’s strategy and best practices
• Experience with security controls implementation, configuration and maintenance
• Experience with vulnerability management tooling, remediation, and processes
• Experience with coding/scripting in one or more languages (Python, C, C++, Java)
• Experience with Linux operating systems (Ubuntu preferred)
• Understanding of concepts related to Systems Engineering/DevOps, IaC, IAM, network security, systems security, cryptography
• Have a wide understanding of cybersecurity and data protection frameworks such as ISO 27001, NIST, SOC2, PCI-DSS, GDPR, CCPA.
• Experience with third party and external audits

go to method of application »

Description

• Use your deep C++ skills on Windows and MacOS to build an amazing open source developer experience with Multipass, the workstation mini-cloud at your fingertips which provides Ubuntu and appliance VMs on demand for build, test and prototyping.
• The Multipass team is hiring a Software Engineer to join our distributed team. We greatly value quality in our code, and great user experience.
• Multipass is published for macOS, Windows, and also Linux. Think of it as a workstation mini-cloud. At its simplest you can simply say multipass launch and you will get a new VM on your workstation. You can feed that VM data, just as you would on a public cloud like AWS, Azure or GCP.
• The goal is not to be a full cloud of course. The goal is to give developers a local cloud on their workstation, which they can use to run builds in the background, or to try cloud appliances, or to test their own cloud deployments and cloud-init scripts, free of charge. People sometimes use it as a build farm on a shared server, for example.
• As a Software Engineer you are expected to play a leadership role designing, mentoring, reviewing and of course coding.
• This is a remote position available in EMEA and the Americas.

What you will focus on

• Ensure Multipass is easy and intuitive to use
• Architect new features and design the user experience
• Write high-quality code to create new features and fix bugs
• Review code and architecture as part of Canonical’s engineering process
• Collaborate proactively with a distributed team
• Debug, track down and fix issues encountered by our users
• Foster the open source community and support customers when needed
• Travel internationally for up to two weeks, twice a year, for company events

Requirements
What we are looking for in you:

• Bachelor's Degree or equivalent in Computer Science, STEM or similar degree
• Cross-platform development experience on macOS and/or Windows
• Expertise in modern C++ development
• Experience with software testing and test-driven development
• Extremely high personal standards for code quality, testing and design
• Knowledge of hypervisor technologies such as Hyper-V, VirtualBox, KVM, and QEMU
• Open source experience and involvement
• Knowledge of CI systems a plus
• Capacity to learn quickly about new systems and techniques
• Excellent communication skills in English - both verbal and written

What we offer you

• We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance.
• In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
• Distributed work environment with twice-yearly team sprints in person
• Personal learning and development budget of USD 2,000 per year
• Annual compensation review
• Recognition rewards
• Annual holiday leave
• Maternity and paternity leave
• Employee Assistance Programme
• Opportunity to travel to new locations to meet colleagues
• Priority Pass, and travel upgrades for long haul company events

go to method of application »

Description

• Canonical is building a new generation of Ubuntu-based container images to simplify open-source application deployment across the world. These container images will be free to use with long-term security commitments, and engineered for performance, security and usability. As with Ubuntu, we will work in the open and welcome community participation.
• In this role, you’ll be developing the tools and technology for building and maintaining this new generation of container images. You’ll be working with multiple teams, both inside and outside Canonical, to ensure we deliver container images with the highest quality whilst maintaining a seamless Ubuntu user experience.
• You will also be highly involved in the implementation and maintenance of the Continuous Integration and Continuous Delivery automation around these container images, for which you are expected to demonstrate deep insights into container-based DevOps.
• You will be contributing to fast-moving products like Rocks (OCI images) and Chisel, and thus have the chance to help steer and consolidate this new team.
• You’ll gain experience with numerous container technologies and participate in exciting and exploratory tasks, where your feedback will be critical for the decision-making process. As an engineer, your seniority will be based on your software development background and ability to lead junior team members.
• Come build a rewarding, meaningful career working with the best and brightest people in technology at Canonical. This is an exciting opportunity for experienced software engineers looking for a place to leave their mark, who are passionate about shaping an open source product with the highest quality, with and for the community!

What you’ll do

• Build robust, scalable, leading-edge container images
• Work on automated Ci/CD processes for building, testing and publishing our container images
• Write tools and tests for assessing security compliance and cloud-native compatibility
• Work in Python and/or Go to deliver new functionalities to our container-building tools
• Participate in strong engineering process through code and architectural review
• Provide technical feedback for the team’s decision-making process
• Engage with the open-source community as a subject-matter expert
• Grow our knowledge base and write documentation
• Work in a collaborative, agile and globally distributed environment
• Mentor and help hiring
• Work from home with global travel up to 15% for internal and external events

Requirements
Who you are - at least some of those statements apply to you:

• You have a Bachelor's Degree or equivalent in Computer Science, STEM or a similar degree
• You are knowledgeable and passionate about software development
• You are a team player and have experience in collaborative development
• You have worked with CI/CD systems (e.g. Jenkins, GitHub Actions, Concourse CI, etc.)
• You have a track record of delivering timely, high-quality software
• You have experience with container images and containerised operations
• You master at least one container management/orchestration tool (e.g. Docker, Kubernetes, etc.)
• You have significant experience with Python and/or Go
• You are experienced with Linux systems administration and package management
• You have strong written and verbal communication skills to convey technical concepts
• You bring clarity to technical and engineering discussions
• You are someone who strongly believes that sharing is caring, and knowledge is power
• Your skills range from those of a Graduate to a mid-senior Software Engineer.