Location: London; New York; Edinburgh; Paris; Toronto; Montreal
Workplace: Hybrid
WHO ARE WE?
Cohere is the leading security-first enterprise AI company. We build cutting-edge foundation AI models and end-to-end products that are designed to solve real-world business problems.
We’re training and deploying frontier models for enterprises who are building AI systems. We believe that our work is instrumental to the widespread adoption of AI and we are looking for folks that want to be part of that.
We obsess over what we build. Each one of us is responsible for contributing to increasing the capabilities of our models and the value they drive for our customers. Cohere is a team of researchers, engineers, designers, and more, who are all passionate about their craft.
We are a global technology company headquartered in Toronto with key offices in London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul. Join us!
Role Overview:
As a Member of Technical Staff in the Safety for Agents team, you will make a meaningful impact on the development of better, fairer, more trustworthy, and more secure Large Language Models (LLMs). Your primary focus will be on data generation, post-training algorithms, and evaluation methods to ensure Safety in the next generation of models that can access external resources and take actions in the world. You will work closely with other cross-functional machine learning teams and data annotation teams, and will also collaborate with product and policy teams.
This role combines expertise in machine learning, ethical and responsible AI, experimental design, and data generation and management.
It will require curiosity to tackle totally new scientific problems, engineering skills to implement the pieces we need to test solutions to these, and a desire to dive into messy data and results. You will be on a small team with a lot of autonomy and decision-making power, responsible for making the next generation of LLMs better for society as a whole.
Please Note: The existing team work in offices in London, Edinburgh, Paris, Toronto, and New York, but we also embrace being remote-friendly! For this role you need to have ~50% working day overlap with UK/EU timezone (e.g. US East is fine) but there are otherwise no restrictions on where you can be located for this role.
Key responsibilities:
- Strong statistical skills and experience evaluating scientific experiments related to data collection and model performance.
- Extremely strong software engineering skills.
- Strong expertise in designing and conducting data collection tasks, including working with human annotators.
- Experience analyzing datasets with respect to their quality, biases, and suitability for training ML models.
- Hands-on experience training large language models (LLMs) on distributed training infrastructures.
- Familiarity with evaluating and improving the generalizability and robustness of ML systems.
- Proficiency in programming languages such as Python and ML frameworks (e.g., PyTorch, TensorFlow, JAX).
- Excellent communication skills to collaborate effectively with cross-functional teams and present findings.
- One or more papers at top-tier venues (such as NeurIPS, ICML, ICLR, AIStats, MLSys, JMLR, AAAI, Nature, COLING, ACL, EMNLP).
Working Location:
This role can be based remotely or from one of our office locations listed on the job description - there is no minimum in-office qualification requirement. We care most about hiring exceptional people regardless of locations, though please check the location listed on the posting for guidance around the core time zone or working hours alignment expected for the role.
FULL-TIME EMPLOYEES AT COHERE ENJOY THESE PERKS:
- A weekly lunch stipend of $75/£75 or equivalent in your local currency for lunch.
- Full health and dental benefits, including a separate budget for mental health.
- RRSP matching, 401K, Pension Scheme.
- 100% Parental Leave top-up for up to 6 months, for either parent.
- Annual enrichment benefits:
Arts & culture, fitness/wellness, quality time, and a workspace improvement credit.
Education & learning stipend for conferences, courses, and coaching.
- 6 weeks of paid vacation (30 working days!)
- Budget for traveling to other offices if you are remote, plus an annual company offsite.
HOW AND WHERE WE WORK:
- Cohere is remote-friendly, but we also have offices in Toronto, London, New York City, San Francisco, Montreal, Paris, Berlin and Seoul with more opening soon.
- For those in the office: a daily lunch program, plenty of snacks, and regular community and social events.
- For those not near an office: a co-working benefit so you can work alongside others in your city.
- Everyone receives a $500 home office stipend to set up your workspace properly.
If any of the above doesn’t line up exactly with your experience, we still encourage you to apply.
We strive to create an inclusive work environment for all; we welcome applicants from all backgrounds and are committed to providing equal opportunities. Should you require any accommodations during the recruitment process, please submit an Accommodations Request Form https://docs.google.com/forms/d/12a6IrLdF3kI2nonKSr4tiFuz18rLQbaeYV-JM9L4o9Q/edit, and we will work together to meet your needs.
We may use AI-enabled tools to screen and assess applicants against the criteria for this position. This helps our recruiters identify potentially qualified candidates, but it doesn't limit the applications our recruiters may review or consider.
Beware of Scams: Cohere will never ask for payment or third-party services (e.g., CV writing) as part of our hiring process. All legitimate roles are listed on the Cohere careers page and LinkedIn only, with all communications from Cohere employees coming from an @cohere.com or @cw.cohere email alias. If jobs are viewed on other sites then please verify these through our official careers https://cohere.com/careers page.
ГибридseniorLondon; New York; Edinburgh; Paris; Toronto; Montreal
Location: San Francisco, CA • New York, NY • United States
Figma is growing our team of passionate creatives and builders on a mission to make design accessible to all. Figma’s platform helps teams bring ideas to life—whether you're brainstorming, creating a prototype, translating designs into code, or iterating with AI. From idea to product, Figma empowers teams to streamline workflows, move faster, and work together in real time from anywhere in the world. If you're excited to shape the future of design and collaboration, join us!
As a Security Engineer you will identify and drive impactful projects to improve the security of Figma’s product, platform, and IT systems. We are hiring for multiple teams within Security Engineering: AI Security, Platform Security, Product Security, and Anti-Abuse. This is a remote first role.
You will partner closely with teams across the company and focus on systemic security improvements and risk reduction. You will also participate in operational security responsibilities like security reviews, consulting, vulnerability triage, and security incident response.
Examples of what you may work on across teams:
AI Security
Perform technical security assessments, code audits, and design reviews for new AI infrastructure, platforms, and products.
Design and develop technical solutions to secure AI models, tooling, debugging workflows, and data pipelines.
Advocate for secure practices across Figma’s AI infrastructure, platforms, and data systems.
Build the next generation of internal AI-powered access insights and security tooling.
Help run penetration testing and offensive security exercises against Figma’s AI infrastructure, platforms, and products.
Platform Security
Perform technical security assessments, code audits, and design reviews for changes to Figma’s cloud and corporate infrastructure.
Design and develop solutions to prevent or mitigate cloud and corporate security risks.
Advocate for secure practices within Figma’s cloud and corporate infrastructure.
Build platforms and tooling to detect and respond to infrastructure and corporate security threats.
Product Security
Perform technical security assessments, code audits, and design reviews for new product features.
Design and develop solutions to prevent or mitigate product security vulnerabilities.
Advocate for secure development practices across Figma’s products and services.
Help run penetration testing, offensive security exercises, and support our bug bounty program.
Help respond to product security incidents.
Anti-Abuse
Design and build technical systems to prevent spam, fraud, and abuse.
Partner closely with product teams to identify and address potential abuse vectors.
Develop new signals and improve the use of existing signals to detect abusive behavior.
Help respond to spam, fraud, and abuse incidents.
This is a full-time role that can be held from one of our US hubs or remotely in the United States.
We’d love to hear from you if you have:
5+ years of proven engineering experience working in either a Security Engineering or a Software Engineering role. In the case of the latter, some security experience is preferred.
Strong security judgment in threat modeling and risk prioritization
and/or
strong technical judgment in designing and building maintainable, scalable systems.
Proficiency in at least one general-purpose coding language.
Strong communication and interpersonal skills, with demonstrated experience collaborating across functions.
While not required, it’s an added plus if you also have:
Subject matter expertise in Application Security, Cloud Security, Corporate Security, Data Access Governance, and/or IAM (Identity and Access Management).
Demonstrated ability to make hard prioritization decisions in security controls.
At Figma, one of our values is Grow as you go. We believe in hiring smart, curious people who are excited to learn and develop their skills. If you’re excited about this role but your past experience doesn’t align perfectly with the points outlined in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles.
#LI-Remote
Pay Transparency Disclosure
Job level and actual compensation will be decided based on factors including, but not limited to, individual qualifications objectively assessed during the interview process (including skills and prior relevant experience, potential impact, and scope of role), market demands, and specific work location.
Figma offers equity to employees, as well as a competitive package of additional benefits, including health, dental, and vision coverage; retirement benefits with company contributions; parental leave and reproductive or family planning support; mental health and wellness benefits; and paid time off. Figma provides paid sick leave, holidays, and other leave benefits in compliance with applicable federal, state, and local laws, including the requirements of the Washington Minimum Wage Act and related regulations. Exempt employees are eligible for employer‑provided paid flexible PTO in addition to flexible paid sick leave. PTO is subject to manager approval. Additional benefits may include company recharge days, cell phone and home internet reimbursements, and a number of lifestyle spending accounts. Figma also offers sales incentive compensation for most sales roles and an annual bonus plan for eligible non-sales roles. All compensation and benefits are subject to applicable plan terms and may be modified by Figma at any time, consistent with applicable law.
Annual Base Salary Range:
$153,000
—
$376,000 USD
At Figma we celebrate and support our differences. We know employing a team rich in diverse thoughts, experiences, and opinions allows our employees, our product and our community to flourish. Figma is an
equal opportunity workplace
- we are dedicated to equal employment opportunities regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity/expression, veteran status
,
or any other characteristic protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements.
We will work to ensure individuals with disabilities are provided reasonable accommodation to apply for a role, participate in the interview process, perform essential job functions, and receive other benefits and privileges of employment. If you require accommodation, please reach out to
accommodations-ext@figma.com
. These modifications enable an individual with a disability to have an equal opportunity not only to get a job, but successfully perform their job tasks to the same extent as people without disabilities.
Examples of accommodations include but are not limited to:
Holding interviews in an accessible location
Enabling closed captioning on video conferencing
Ensuring all written communication be compatible with screen readers
Changing the mode or format of interviews
To ensure the integrity of our hiring process and facilitate a more personal connection, we require all candidates keep their cameras on during video interviews. Additionally, if hired you will be required to attend in person onboarding.
By applying for this job, the candidate acknowledges and agrees that any personal data contained in their application or supporting materials will be processed in accordance with
Figma's Candidate Privacy Notice
.
Application limits:
To help candidates focus on the opportunities most relevant to their skills and experience, Figma limits the number and frequency of applications. These limits apply to all roles:
Candidates may submit up to 5 applications during any rolling 30-day period.
Candidates may not reapply to the same role while an application is active or within 90 days of receiving a rejection.
Once the applicable days has passed, candidates are welcome to apply again.
О ПРОЕКТЕ
StarTribe — часть крупного международного холдинга с 10-летней историей. Мы разрабатываем высоконагруженные IT-продукты для мировых брендов. Сейчас мы усиливаем команду безопасности для тестирования внутренних и публичных приложений собственной разработки.
ВАШИ КЛЮЧЕВЫЕ ЗАДАЧИ
— Pentesting: Проведение глубоких тестов веб-приложений (White/Grey/Black box).
— Remediation: Подготовка конкретных рекомендаций по устранению уязвимостей.
— Collaboration: Тесное взаимодействие с разработчиками для внедрения Security Best Practices.
— DevSecOps: Участие в разработке внутреннего инструментария и автоматизации проверок.
— Mentoring: Помощь коллегам и развитие экспертизы внутри команды.
ЧТО МЫ ЖДЕМ ОТ ВАС
— Опыт: 4+ года в области AppSec и тестирования безопасности веб-приложений.
— Инструментарий: Экспертное владение Burp Suite и другими средствами анализа (Manual & Auto).
— Коммуникация: Умение аргументированно доносить риски до бизнеса и находить компромиссы с Dev-командами.
— Стек: Понимание специфики безопасности Node.js и PHP (дополнительно .NET / Go).
БУДЕТ ПЛЮСОМ
— Сертификации уровня OSCP, OSWE или Burp Suite Certified Practitioner.
— Активное участие в CTF, наличие рейтинга на HackTheBox.
— Наличие подтвержденных Bug Bounty репортов.
УСЛОВИЯ И БЕНЕФИТЫ
— Оформление: Официальный контракт по ТК Кипра.
— Релокация: Частичная компенсация аренды жилья и корпоративная мобильная связь.
— Бонусы: Годовой бонус по результатам, 4 дополнительных Day Off в году.
— Life Quality: Корпоративное питание, спорт, мероприятия для семей и активности для детей.
— Развитие: Скидка 50% на SkyEng, поддержка образовательных инициатив.
ОфисЛимасол
Не хотите искать каждый день?
Настройте подбор один раз, и подходящие вакансии будут сами приходить в Telegram.
Настройте подбор, и подходящие вакансии будут приходить в Telegram.
Location: New York, NY (HQ); San Francisco, CA; Remote (US)
Workplace: Hybrid
ABOUT RAMP
Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books.
The problems are high-stakes, data-dense, and unforgiving.
We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome.
The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same.
If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it.
As Ramp’s founding Privacy engineer, you will build a privacy program that powers Ramp’s growth while earning trust from customers and prospects.
What You’ll Do
- Build privacy-focused application primitives and integrate them into our existing products
- Partner with other engineering teams to design and deploy solutions which are inherently privacy-centric and secure
- Improve, implement, and deploy data retention and anonymization strategies across our environment
- Track shifting legal standards (alongside with Ramp’s Privacy Counsel) and update Ramp systems and processes to match
What You Need
- Minimum of 4 years of experience building software
- Minimum of 2 years of experienced focused on platform, privacy, and/or security
- Desire to work in a fast-paced environment, continuously grow, and master your craft
- Ability to turn business and product ideas into engineering solutions
Nice-to-Haves
- Working knowledge of data-protection legal requirements
- Experience with Python (Flask), React, and AWS (ECS, as well as other core services)
BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL)
- Flexible PTO
- Centralized home-office equipment ordering
- Health and wellness stipend
- Budget for intra-office travel
- Weekly coffee stipend
UNITED STATES
- 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
- One Medical annual membership
- 401(k), including employer match on contributions made while employed by Ramp
- Fertility HRA (up to $10,000 per year)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
- Pet insurance
- In-office perks: lunch, snacks, drinks, and more
- Relocation expense coverage to NYC or SF (if needed)
CANADA
- Group medical, dental, and vision coverage through Sun Life
- Life, AD&D, and disability coverage
- Fertility drug coverage (up to $4,000 lifetime)
- Group Retirement Plan with employer match (RRSP + DPSP)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
- Employee Assistance Program and virtual care through Lumino Health
UNITED KINGDOM
- Private medical insurance through Freedom Elite
- Virtual GP and at-home care via eMed x Livi
- Workplace pension through Penfold, with salary sacrifice option
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay
REFERRAL INSTRUCTIONS
If you are being referred for the role, please contact that person to apply on your behalf.
OTHER NOTICES
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.
Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice
Location: New York, NY (HQ)
Workplace: Hybrid
ABOUT RAMP
Ramp is building the smart infrastructure for finance teams, embedded in the transaction flow of every dollar a business spends. We automate how over $275B in annualized spend flows in and out of 85,000+ companies: authorizing payments, flagging risk, categorizing spend, and closing books.
The problems are high-stakes, data-dense, and unforgiving.
We hire people with high agency and high urgency. We look for slope over intercept. We care less about where you trained and more about what you’ve built. At Ramp, everyone is a builder who owns problems end to end and makes consequential decisions that shape the outcome.
The median Ramp customer saves 7.5% and grows revenue 16% in their first year – far in excess of businesses operating without Ramp. We believe every ambitious company deserves the same.
If you want to build systems that directly shape how companies move and manage billions, Ramp is the place to do it.
About the Role
The Product Security team helps make Ramp the most secure place for our customers to collect, manage, and put to work their business’ financial information.
Our work centers in three areas:
- Ramp builds products with an eye for security
- Ramp detects and responds to threats before they cause harm
- Security powers Ramp’s growth
Check out our Engineering Blog https://engineering.ramp.com/ for more on our tech stack, mission and values!
What You’ll Do
- Build security-focused application primitives and integrate them into our existing products
- Design and deploy platform-level mitigations to common security issues
- Lead remediation of prioritized issues across our technology stack: collaborating with other engineers to triage and fix vulnerabilities discovered internally, through penetration testing, and through our bug bounty program
- Partner with engineering teams to design and deploy solutions which are inherently secure
- Champion the use of tooling (linters, static analysis, posture assessment scanners, query inspectors, etc.) which help Ramp engineers build secure systems more quickly
What You Need
- Minimum of 5 years of experience building software
- Minimum of 2 years of experience focused on platform, infrastructure, and/or security
- Desire to work in a fast-paced environment, continuously grow, and master your craft
- Ability to turn business and product ideas into engineering solutions
- Alignment with Ramp’s core values of enabling businesses to grow more by spending less
Nice to Haves
- Experience with Python (Flask), Elixir, and AWS (ECS, as well as other core services)
- Experience analyzing and improving the security posture of infrastructure in AWS
BENEFITS AVAILABLE TO ALL FULL-TIME RAMP EMPLOYEES (GLOBAL)
- Flexible PTO
- Centralized home-office equipment ordering
- Health and wellness stipend
- Budget for intra-office travel
- Weekly coffee stipend
UNITED STATES
- 100% medical, dental & vision insurance coverage for you, with partial coverage for dependents
- One Medical annual membership
- 401(k), including employer match on contributions made while employed by Ramp
- Fertility HRA (up to $10,000 per year)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay
- Pet insurance
- In-office perks: lunch, snacks, drinks, and more
- Relocation expense coverage to NYC or SF (if needed)
CANADA
- Group medical, dental, and vision coverage through Sun Life
- Life, AD&D, and disability coverage
- Fertility drug coverage (up to $4,000 lifetime)
- Group Retirement Plan with employer match (RRSP + DPSP)
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay, with additional time available at reduced pay
- Employee Assistance Program and virtual care through Lumino Health
UNITED KINGDOM
- Private medical insurance through Freedom Elite
- Virtual GP and at-home care via eMed x Livi
- Workplace pension through Penfold, with salary sacrifice option
- Parental leave: up to 16 weeks (birthing + bonding) or 8 weeks (bonding only) at 100% pay with additional time available at reduced pay
REFERRAL INSTRUCTIONS
If you are being referred for the role, please contact that person to apply on your behalf.
OTHER NOTICES
Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Beware of recruiting scams: Ramp will only contact you through official @Ramp.com http://Ramp.com email addresses and will never ask for payment or sensitive personal information during the hiring process.
Ramp Applicant Privacy Notice https://ramp.com/legal/applicant-privacy-notice
Location: USA (Remote)
Workplace: Remote
Tempo is a layer-1 blockchain purpose-built for stablecoins and real-world payments, born from Stripe’s experience in global payments and Paradigm’s expertise in crypto tech.
Tempo’s payment-first design provides a scalable, low-cost predictable backbone that meets the needs of high-volume payment use cases. Our goal is to move money reliably, cheaply, and at scale. Our north star is simplicity for users: fintechs, traditional banks, merchants, platforms, and anyone else looking to move their payments into the 21st century.
We're building Tempo with design partners who are global leaders in AI, e-commerce, and financial services: Anthropic, Coupang, Deutsche Bank, DoorDash, Mercury, Nubank, OpenAI, Revolut, Shopify, Standard Chartered, Visa, and more.
We’re a team of crypto-optimists, building the infrastructure needed to bring real, substantial economic flows onchain. We like to move fast and swing for the fences — join us!
The Role
We are building a full-time internal Red Team to continuously stress-test our own infrastructure. As a security engineer, you won't just be ticking compliance boxes; you will be writing Rust fuzzers, simulating economic attacks on our testnet, and dissecting the EVM to find edge cases in our execution client. We are looking for a builder who understands that the best way to secure a protocol is to try to break it continuously. If you have a history of topping CTF leaderboards, submitting high-severity bug bounties, or building your own security tooling because the standard ones weren't good enough—this role is for you.
Responsibilities
- Proactively hunt for vulnerabilities in the Tempo protocol, consensus engine, and bridge architecture, treating our mainnet like a continuous CTF challenge.
- Design and implement security tooling and automation in liaison with the Foundry team to catch logic errors and edge cases.
- Partner with engineering teams to review critical architecture across our codebase.
- Analyze incentives and game-theoretic risks within the protocol, such as MEV and staking dynamics, to prevent economic exploits.
Qualifications
- Fluency in reading and writing production-level code in systems languages, with a strong preference for Rust.
- Deep expertise in EVM internals, including intimate knowledge of opcodes, storage slots, gas metering, and precompiles.
- Proven track record of offensive security, such as high rankings in CTFs (e.g., Paradigm CTF), high-severity bug bounty submissions, or published research.
- Experience building custom security automation or tooling rather than relying solely on off-the-shelf scanners.
- Bleeding-edge knowledge of the latest blockchain security research, including recent hacks and how these could have been mitigated.
Attributes
- High motor
- Razor-sharp thinker with precise command of language
- Concise, evidence-based communicator
- Excellent organizational and logistical skills
- Intense curiosity and open-mindedness
- Scrappiness; willingness to roll up sleeves
- Growth mindset
Location: Washington, District of Columbia, United States
Dexis is a dynamic professional services firm dedicated to partnering with government and community leaders both in the U.S. and internationally to achieve critical social outcomes in a rapidly changing world.
At Dexis, you will experience a corporate culture of inclusiveness, respect, fairness, and trust. You will be given the means and mentorship needed to succeed, and your creativity will be rewarded.
About the Position
Dexis is seeking a highly experienced
Strategic Consultant
to support our capture and business development efforts for upcoming opportunities with the U.S. Department of State’s Bureau of Diplomatic Security (DS) – Training – Technical Security Engineering. The Advisor will play a critical role in refining our understanding of the client landscape, validating opportunity parameters, and facilitating strategic introductions to key stakeholders within the DS bureau and relevant incumbent organizations.
This role is not designed to be full time and will be engaged as a 1099.
Responsibilities
Provide strategic insight into the organizational priorities, structure, and decision-making processes within the Bureau of Diplomatic Security.
Advise Dexis leadership on client engagement strategies specific to diplomatic security and technical security engineering.
Identify and facilitate introductions with relevant stakeholders throughout the capture and bid process.
Validate programmatic direction, potential scope, and customer expectations for the anticipated opportunity.
Participate in periodic strategy sessions and serve as a trusted advisor throughout the pre-solicitation, capture, and bid phases.
Qualifications
Minimum 5 years of experience working with or supporting the Department of State, with deep familiarity with the State Bureau of Diplomatic Security.
Demonstrated track record of engagement with senior-level DS personnel and contract leadership.
Existing relationships within the DS bureau and/or with current contract implementers in training or technical security engineering.
Exceptional understanding of federal diplomatic security contracting environments.
Prior experience advising capture or proposal teams targeting State Department contracts strongly preferred.
Discretion, professionalism, and a strong sense of integrity in facilitating client-facing interactions.
Benefits
Dexis offers benefits to support employees’ health, financial security, and well-being. The benefits outlined below are for
full-time, US-based
positions only. These benefits include:
Medical and prescription drug coverage:
A choice of three UnitedHealthcare medical plans, with coverage options for employees and eligible dependents.
Dental insurance:
Dental coverage for employees and eligible dependents, including preventive, basic, major, and orthodontic services, subject to plan limits.
Company-paid vision insurance:
Vision coverage for employees and eligible dependents, with premiums paid in full by Dexis.
Employer-funded health reimbursement arrangement (HRA):
Employees who enroll in the Silver HRA medical plan receive an employer-funded HRA to help pay eligible in-network deductible expenses.
Company-paid life and disability insurance:
Basic life and accidental death and dismemberment (AD&D) insurance, plus short-term and long-term disability coverage.
Optional supplemental insurance:
Voluntary supplemental life and AD&D insurance options, including life insurance options for eligible dependents.
Employee Assistance Program (EAP):
Company-paid access to confidential counseling and legal and financial support resources for employees and their families.
Health and wellness resources:
Virtual care, behavioral health resources, and wellness programs available through the medical plan.
Benefits assistance:
Personalized support with benefit enrollment, coverage questions, claims, and finding providers through the Employee Care Center.
Participation, coverage, and employee contributions are subject to applicable benefit plan terms and eligibility requirements.
Dexis is on a mission to help solve today’s most pressing global political, social, and economic challenges and create a world where all people are safe and prosperous. As a Dexis employee, you will be challenged, empowered, and mentored. Our motto is “find a way or make a way” — that’s how Dexis goes “all in.” How will you?
If you are passionate about this opportunity, apply now!
Only those applicants who meet the above criteria will be contacted for interview.
Dexis is an Equal Opportunity Employer, and does not discriminate on the basis of race, color, sex, national origin, religion, pregnancy, disability, age, genetic information, military service, veteran status, ethnicity, citizenship, sexual orientation, gender identity, marital status, childbirth and related medical conditions, including lactation, or any other protected class under applicable law.
Location: Seattle, WA; San Francisco Bay Area
Workplace: Remote
ABOUT DOCKER
Docker has been one of the most loved brands in developer tooling, trusted by more than 20 million monthly users and over 20 billion container image pulls. From solo founders to the world's largest companies, developers rely on Docker to build, share, and run their applications across our suite of products including Docker Desktop, Docker Hub, and Docker Scout.
We are a globally distributed, remote-first team building the tools that define how software gets built and delivered. As AI agents redefine software development, Docker is at the center of that shift, providing the sandboxed environments, verified images, and secure infrastructure that make autonomous workflows trustworthy by default.
_______________________________________________________________________
Docker’s AI Tools & Security team is building the foundation for the next generation of secure, developer-friendly AI infrastructure. Our flagship product, the MCP Gateway, empowers developers to connect, observe, and secure AI agents and tools across the entire lifecycle—from prototype to production. We’re defining how developers safely harness the power of the Model Context Protocol (MCP) in real-world environments.
We’re looking for a Principal Backend Engineer who thrives at the intersection of AI, security, and developer experience. You’ll lead the technical direction of the Gateway and related services, collaborating closely with Product, Design, and Security to deliver elegant frameworks and APIs that developers love to use. This is a high-velocity, high-ownership environment: you’ll ship fast, iterate constantly, and help shape the future of secure agent-based development.
RESPONSIBILITIES:
- Define the technical solution for a new product
- Help shape the product with peers in Product and Design
- Mentor other technical team members
- Be the technical point of contact for the team
- This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.
QUALIFICATIONS:
REQUIRED:
- 10+ years of backend engineering experience, including extensive work on production-grade, distributed systems at scale.
- Technical leadership across multiple teams or domains, with a proven ability to drive architectural vision, set technical direction, and influence long-term product strategy.
- Exceptional product and platform mindset—you think beyond implementation details to how technology shapes developer and business outcomes.
- Expertise in designing and evolving large-scale, cloud-native systems, with deep knowledge of distributed computing, service-oriented architecture, and performance optimization.
- Demonstrated experience building secure, resilient, and high-throughput backend services, with a strong grasp of reliability engineering principles (SLOs, observability, incident response).
- Fluency in Go (preferred) or another modern systems language (Rust, Java, C++, etc.), with the ability to lead technical design reviews and mentor others in language-specific best practices.
- Strong grasp of software engineering fundamentals—CI/CD, testing strategy, source control, and deployment automation—applied in complex, multi-service environments.
- Proven track record of technical mentorship and cross-functional collaboration, enabling teams to deliver high-impact, high-quality software efficiently.
- Deep experience with major cloud platforms (AWS, Azure, GCP) and infrastructure-as-code tooling.
- Ownership mentality with a bias for action and iterative delivery, balancing short-term impact with long-term architectural health.
- Excellent communication skills, with the ability to clearly articulate complex technical concepts to both technical and non-technical audiences.
- Comfortable operating autonomously in distributed, remote-first teams, and leading through influence rather than authority.
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
BONUS:
- Experience with Kubernetes, Docker, and microservices architecture
- Prior experience with OpenAI, Anthropic, or similar LLM APIs, and the MCP specification
WHAT TO EXPECT
FIRST 30 DAYS:
- Meet team members
- Build context about the problem space and prior art
- Provide feedback on current exploration and propose next steps in line with Product and Design
FIRST 90 DAYS:
- Work with Product and Design on defining the product
- Attend customer calls
- Meet people across the company
- Help grow the team by participating in hiring loops
ONE YEAR OUTLOOK (FIRST YEAR):
- Bring the product to market
Docker considers visa sponsorship on a case-by-case basis based on business needs.
Compensation & Equity
United States: $198K – $319K + equity
______________________________________________________________________
POSTING INFORMATION
- Open vacancy: This posting is for an existing open role.
- AI in hiring: Docker may use AI-assisted tools during our recruiting process.
- Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.
______________________________________________________________________
PERKS & BENEFITS
- Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
- Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
- Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
- Home office support – Set up your workspace for comfort and success.
- Technology stipend – Equivalent to US$100 net per month to help support your work.
- Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
- Parental leave – 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
- Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
- Docker swag – Because representing the whale never gets old.
Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.
#LI-REMOTE
Location: Burundi
Dexis is a dynamic professional services firm dedicated to partnering with government and community leaders both in the U.S. and internationally to achieve critical social outcomes in a rapidly changing world.
At Dexis, you will experience a corporate culture of inclusiveness, respect, fairness, and trust. You will be given the means and mentorship needed to succeed, and your creativity will be rewarded.
LEAP Program Description
Global Solutions Ventures (GSV) – a joint-venture partnership between ZemiTek, LLC and Dexis Consulting Group – is implementing the Long-term Exceptional Technical Assistance Project (LEAP Global), a mechanism originally used by USAID to battle against infectious diseases such as malaria, HIV/AIDS, tuberculosis, neglected tropical diseases, and pandemic influenza. As of July 1, 2025, LEAP Global transitioned to the U.S. Department of State (DOS). This initiative aims to address the complex human resource challenges faced by national infectious disease programs in the USA-supported countries.
The intervention of this project is to hire and embed technical expert advisors and subject matter experts within government entities. By directly embedding the technical expertise within the national programs, LEAP provides long-term, sustainable lifesaving support to empower host governments to lead and manage key aspects of their infectious disease portfolios and improve coordination between the U.S. Government and the host country.
About the Position
The Senior Global Health Security (GHS) and Infectious Disease (ID) Advisor will support the MOH Emergency Operations Center (EOC or COUSP in French) and NACP (National AIDS Control Program) in carrying out life-saving humanitarian assistance (LHA) in full alignment with the new Presidential Executive Order (EO) directives. The primary focus of the Advisor will be technical support with a special emphasis on preventing, detecting, and responding to infectious disease threats which impact public health. The Advisor will also provide support for the National HIV response to improve capacity for PEPFAR transition.
The Senior GHS and ID Advisor will support the appropriate multi-sectoral Government Departments and Agencies - such as the Ministry of Health, Agriculture, and Environment- for the effective adoption and implementation of life saving interventions focusing on preventing, detecting and responding to infectious disease threats with public health potential, such as zoonotic diseases. The Senior GHS & Infectious Disease Advisor will identify programmatic bottlenecks and facilitate solutions through coordinated technical support and facilitation of effort through the GHS projects, Pandemic Fund and the Global Fund. The Senior GHS and ID Advisor will be based within the EOC and will also work with the NACP. The Advisor will receive direction from the Director of the EOC and as needed, from the NACP Director, who will serve as the onsite Manager/Supervisor. Familiarity with Department of State/USG programming and C/AOR experience are highly desirable as the Advisor is expected to support the implementation of the Department of State GHS and HIV portfolio. French and English fluency are required for this assignment. The Advisor will report to the U.S. Department of State on a weekly and monthly basis.
Responsibilities
Support multisectoral ministries in effective delivery of life-saving humanitarian assistance (LHA) through utilization of domestic and donors’ (e.g. the Pandemic Fund, Global Fund when relevant such as COVID-19 response funds).
Assist the relevant ministries with effective delivery of LHA GHS services, including but not limited:
community-based active surveillance,
systems capacity for detecting priority diseases/threats,
data systems for monitoring, analyzing, and reporting on threats,
infection prevention and control (IPC), including commodities and WASH in healthcare facilities,
case management; and Emergency Management including Emergency Operating Centers (EOC) and Point of Entry Screening,
Risk Communication and Community Engagement,
Emergency outbreak response.
Provide technical support and actively engage with field work to implement programmatic and response interventions at national and sub-national levels.
Assist in monitoring the progress of GHS program implementation and provide recommendations for improvements of service delivery.
If relevant for the country, review and analyze performance reports submitted to the Pandemic Fund, Global Fund (GF), and other partners.
Help organize regular discussions among the multisectoral stakeholders and partners to ensure alignment of technical approaches in the respective GHS portfolio.
Provide support to the appropriate multisectoral ministries in identification of performance gaps, potential barriers and bottlenecks, and facilitate consensus on targeted interventions to improve performance on key indicators attributable to:
reduction in incidence and mortality for epidemic and pandemic prone diseases;
strengthening systems to prevent, detect, and respond to infectious disease threats;
rapid and effective responses to infectious disease outbreaks which are threats for public health.
Support the implementation and expansion of best practices in GHS and outbreak response nationwide.
Support MOH and other relevant Ministries in routine review of service delivery processes and outcomes.
Promote the dissemination of best practices and effective models nationwide.
Promote prioritized interventions in effective community-based active surveillance, strengthening systems capacity for detecting priority diseases/threats, and data systems for monitoring, analyzing, and reporting on threats;
Support of the adoption of infection prevention and control (IPC), including commodities and WASH in healthcare facilities; case management;
Support and strengthen Emergency Management including Emergency Operating Centers (EOC or COUSP in French) and Point of Entry Screening; Risk communication.
Support the relevant Ministries to rapidly and accurately report infectious diseases threats to the relevant, domestic and international system– such as the International Health Regulations (IHR) and World Animal Health Information System (WAHIS) for quick responses to pandemic threats.
Assist the relevant multisectoral Ministries with emergency outbreak responses as needed.
Assist the relevant multisectoral Ministries to achieve the relevant GHS related targets including the Joint External Evaluation (JEE); IHR States Parties Self-Assessment (SPAR); and the Pandemic Fund Framework which includes reporting on the 7-1-7 target (7 days to detect, 1 day to report, 7 days to complete the initial response)
Assist and provide information to the Department of State to prepare U.S. Government workplans and reports.
Support the relevant Ministries in effective utilization of Pandemic Fund grants; other donors’ resources, and emergency outbreak responses efforts.
Provide technical support to develop Pandemic Fund grant applications and support grant implementation review to ensure effective grant implementation and avoid duplication with US Government funded projects.
Consult with relevant stakeholders on required technical assistance.
Assist in monitoring the progress of grant implementation.
Review and analyze performance reports submitted to the Pandemic Fund and other partners.
Help organize regular discussions among the relevant multisectoral stakeholders, Ministries, and donors, and DOS to ensure alignment of technical approaches in the respective GHS portfolios.
Support emergency outbreak response including assisting with mobilizing resources, coordination of efforts, and technical support for efforts to contain and respond to the outbreak.
Support the National AIDS Control Program (NACP or PNLP in French and other stakeholders) to improve the Government of Burundi’s capacity for PEPFAR transition.
Provide technical support for the district oversight approach to improve the MOH’s capacity to oversee and delivery essential HIV services to reach and maintain HIV epidemic control
Provide technical support for streamlining of health systems approaches and strategies (e.g. laboratory, reporting, supervision and training) in the context of reduced resources and preparation for PEPFAR transition.
Consult with relevant stakeholders on required technical assistance.
Communications:
Regular conference calls with multisectoral stakeholders, US Embassy and DOS/Washington to review progress, discuss activities and address emerging issues.
The Senior GHS and ID Technical Advisor should provide information and avail him/herself for calls/meetings with the US Embassy as requested.
The Advisor will provide monthly reports to US Embassy/U.S. Department of State
REPORTING:
The Senior Advisor will provide a detailed monthly report to the U.S. Department of State, submitted by the 5th day of the following month. Additionally, the Advisor will submit a weekly progress report to the U.S. Department of State (and participate in weekly calls) to include a short paragraph about main successes for that week.
Qualifications
Advanced degree (MPH, MD, PhD, DVM, or equivalent) in public health, epidemiology, medicine, or a related field.
Minimum of 7 years of technical and programmatic experience in global health security and infectious diseases.
Demonstrated understanding of USG program implementation, USG interagency coordination, and donor landscape.
Knowledge of the host country and government institutions and bureaucratic processes, policies, and regulations. This entails high-level knowledge of host government laws, policies, procedures, and institutional doctrines.
Knowledge of research and analysis techniques to successfully study complex subjects and issues related to assigned program area.
Familiarity with international frameworks such as IHR 2005, JEE, SPAR, UNAIDS and HIV epidemic control metrics and USG’s LHA guidance.
Demonstrated experience working collaboratively across government ministries, donors, and implementing partners.
Strong written and verbal communication skills in English and French.
Preferred Qualifications
Previous experience with USG-funded programs.
Experience using digital platforms for surveillance, health information management, and emergency coordination.
Knowledge of the One Health approach and integration of human, animal, and environmental health efforts.
Benefits
Dexis offers benefits to support employees’ health, financial security, and well-being. The benefits outlined below are for
full-time, US-based
positions only. These benefits include:
Medical and prescription drug coverage:
A choice of three UnitedHealthcare medical plans, with coverage options for employees and eligible dependents.
Dental insurance:
Dental coverage for employees and eligible dependents, including preventive, basic, major, and orthodontic services, subject to plan limits.
Company-paid vision insurance:
Vision coverage for employees and eligible dependents, with premiums paid in full by Dexis.
Employer-funded health reimbursement arrangement (HRA):
Employees who enroll in the Silver HRA medical plan receive an employer-funded HRA to help pay eligible in-network deductible expenses.
Company-paid life and disability insurance:
Basic life and accidental death and dismemberment (AD&D) insurance, plus short-term and long-term disability coverage.
Optional supplemental insurance:
Voluntary supplemental life and AD&D insurance options, including life insurance options for eligible dependents.
Employee Assistance Program (EAP):
Company-paid access to confidential counseling and legal and financial support resources for employees and their families.
Health and wellness resources:
Virtual care, behavioral health resources, and wellness programs available through the medical plan.
Benefits assistance:
Personalized support with benefit enrollment, coverage questions, claims, and finding providers through the Employee Care Center.
Participation, coverage, and employee contributions are subject to applicable benefit plan terms and eligibility requirements.
Dexis is on a mission to help solve today’s most pressing global political, social, and economic challenges and create a world where all people are safe and prosperous. As a Dexis employee, you will be challenged, empowered, and mentored. Our motto is “find a way or make a way” — that’s how Dexis goes “all in.” How will you?
If you are passionate about this opportunity, apply now!
Only those applicants who meet the above criteria will be contacted for interview.
Dexis is an Equal Opportunity Employer, and does not discriminate on the basis of race, color, sex, national origin, religion, pregnancy, disability, age, genetic information, military service, veteran status, ethnicity, citizenship, sexual orientation, gender identity, marital status, childbirth and related medical conditions, including lactation, or any other protected class under applicable law.
Location: Remote: United States; Remote: Canada
Workplace: Remote
At Render, we’re building the modern cloud platform for developers creating AI-native, full-stack, multi-service applications. Our mission is to eliminate the tradeoff between the power of hyperscalers and the simplicity of developer-friendly platforms—so teams can ship fast, scale reliably, and focus on their product, not infrastructure.
Unlike complex hyperscalers or ephemeral edge/serverless solutions, Render offers a developer-first experience with persistent compute, dynamic autoscaling, built-in orchestration, and observability, allowing teams to launch, scale, and manage real-world applications without writing infrastructure code or managing servers. Whether you're building LLM-powered applications, scalable SaaS products, or async processing pipelines, Render empowers teams to move fast and scale confidently from MVP to millions of users.
Our platform is trusted by over 7 million developers worldwide and continues to grow rapidly. In February 2026, we raised an additional $100M in Series C financing, bringing our total funding to $260M, to accelerate our vision of making cloud infrastructure both powerful and intuitive—designed for the speed of modern AI development.
We’re a diverse and talented team that values craft, velocity, and user experience. If you’re excited to help shape the future of the intelligent cloud and empower developers everywhere, we’d love to hear from you.
APPLYING TO RENDER
We're seeking candidates who possess high integrity, humility, and an insatiable drive to learn. Through reasoned discussions and continuous feedback, we strive to improve both individually and collectively. We foster an environment of mutual trust and respect, empowering effective debate to achieve the best outcomes for our customers and team.
We especially encourage members of underrepresented groups in the tech community to apply and understand that not all successful candidates will meet each requirement listed.
Our interview process is unique to each role, and we value the candidate experience just as much as our customer experience. We hope your conversations with us reflect a thoughtful process that is illuminative, enjoyable, and respectful of your time.
ABOUT THE ROLE
The Render Security team is a small, dedicated team of engineers that runs all things security at Render.
- Full-Stack Security Ownership - We don't just monitor; we build. From custom security tooling to comprehensive threat assessment, we own the entire security lifecycle at Render.
- Engineering-First Approach - We are a team of engineers that understand security deeply, we create solutions that integrate seamlessly with development workflows rather than creating friction.
- Proactive - We stay ahead of threats through continuous assessment, automated monitoring, and rapid response.
By joining Render at an early stage, you will be directly involved with building out foundational security for Render and make decisions that will shape our product and company, directly impacting developers around the globe.
YOU WILL:
- Build internal tooling to enable secure access to resources (e.g., wrappers, utilities, authentication services, and proxies).
- Implement detection and monitoring systems that alert the team to high signal vulnerabilities
- Analyze and assess security issues identified through threat modeling, penetration testing, security scans and vulnerability disclosure.
- Work with developers on sensitive code paths and educate them on secure design patterns.
- Liaise with customers regarding their security and compliance needs, and in return, inform our security program.
- Communicate security risks and solutions to technical and non-technical stakeholders as part of company-wide planning and prioritization processes.
- Stay up-to-date with the latest security threats, vulnerabilities, and best practices and make recommendations for improvements to our security posture.
- Partner with product engineering teams to inform and build thoughtful security features for our customers.
- Continually ensure that our systems have appropriate authentication, authorization, and accounting with low internal overhead.
WE'RE LOOKING FOR:
- 6+ years of professional experience in software engineering or security.
- Experience designing and building secure web applications, tools, and APIs.
- Experience with vulnerability review and analysis
- Strong incident leadership and diligent response.
- Empathy toward the rest of the team and our customers
- Strong sense of ownership and ability to make pragmatic decisions about your work.
NICE-TO-HAVES:
- Detection engineering experience through implementation and maintenance of a SIEM.
- Experience with any of the technologies the Render product runs on: Go, Typescript, Kubernetes, Postgres, Terraform, Temporal.
- Experience with compliance frameworks such as SOC 2, ISO 27001, HIPAA or PCI.
- Proven expertise in exploiting common security vulnerabilities, demonstrating practical experience in identifying and leveraging vulnerabilities to assess security posture.
- Experience securing applications and systems through threat modelling and risk assessments.
- Active participation and contributions to the security community through public research, blogging, presentations, and other means.
If this role excites you but you don’t meet every single requirement, we’d still love to hear from you—your unique experience might be just what we need.
BENEFITS
- 4 weeks of paid vacation.
- 14 weeks of fully paid parental leave for all parents to bond with a newly born, adopted, or fostered child. We will also work with you to create a supportive plan of return.
- Long-term disability, life insurance, and 401K plans.
- 100% employer-paid medical coverage and 99% employer-paid dental and vision coverage for you and a dependent. FSAs and HSAs are available as well.
- Monthly lifestyle stipend for wellness, mental health and therapy, hobbies, etc.
- Monthly cell phone and internet subsidy.
- Commuter benefits for Renders in the Bay Area, and home office stipends for remote Renders.
- Continuous learning benefits & related support.
This position is generally not eligible for new visa sponsorship. At Render's discretion, the business may sponsor existing visa transfers. Applicants who require sponsorship must receive business authorization.
Render is an equal-opportunity employer. We know that employing a team rich in diverse thoughts, experiences, and opinions allows our employees, product, and community to flourish. We make all employment decisions including hiring, evaluation, termination, promotional, and training opportunities, without regard to race, religion, color, sex, age, national origin, ancestry, sexual orientation, physical handicap, mental disability, medical condition, disability, gender or identity or expression, pregnancy or pregnancy-related condition, marital status, height and/or weight.
We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
We encourage all who are interested to apply. We can't wait to hear from you!
Render — CCPA Applicant Privacy Notice https://drive.google.com/file/d/1wKr9IejoT5McFrs9I2mahQnf6AFwb3z2/view
Render — GDPR Applicant Privacy Notice https://drive.google.com/file/d/1_8jtyXQ1HdRdTdQn9sZ7n-R-zAGBmsFa/view
Location: Home based - EMEA
Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is very widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.
The company is founder led, profitable and growing.
Canonical’s product management team are technologists who have a passion for delivering products and solutions that help shape market demands while elevating open source software everywhere. This is a general application track for the product management positions at Canonical. You will set a clear vision, prioritize work effectively, and ensure the team delivers high-quality products that meet business and user needs. Apply here if you excel at leadership, communication, and technical vision, and believe you can drive product strategy for the business needs of tomorrow. During the interview process we will identify specific software products which would be a good fit for your interests.
We believe that open source is transforming the way that enterprises solve their business needs. Although open source has been around for thirty years, it is only now fundamental to every corner of the software landscape. Going forward we believe open source will have an even bigger impact as it moves into specialised vertical markets. Our goal is to make open source easier, more reliable and more secure for deployment and development. We strive to be the provider of ‘most software to most companies’, starting with Ubuntu but expanding to cover every class of application on every class of compute. To deliver on that ambition, we select product managers for their intellect and strong drive to advance the open source community. Together, we aim to improve open source quality, outreach, and impact. Our product managers set the vision and the direction to ensure teams deliver the right products in the right markets at the right time. They push the boundaries of the technology landscape to identify and deliver products into new and existing market opportunities.
Our product managers are technology professionals with a software engineering background who strive to become business executives and entrepreneurs. We discuss strategy, plan product development, drive engagement, and promote the open source way. We oversee the entire product lifecycle from conception to delivery, blending technical expertise, strategic thinking, analytics, project management skills and effective communication to ensure products meet both user needs and business objectives.
We have open product manager roles across a wide range of product domains, including:
Ubuntu Platform - Our Ubuntu experience on Desktop, Server, Windows (WSL), Multipass, Gaming, Enterprise, & Hardware Enablement
Ubuntu Pro Services - Our key commercial offerings Ubuntu Pro, Compliance, Standards, Security Engineering, and Managed Services on cloud and on prem
AI/ML & MLOps - Open source AI/ML solutions, AIOps automation, model lifecycle management, Kubeflow, MLFlow, KServe, and AI infrastructure on cloud and edge
IoT - Ubuntu on embedded devices and/or edge servers, device management, and robotics
Cloud - Ubuntu in public and private clouds, promoting automation frameworks, and including technologies such as Kubernetes, MAAS, and LXD
Telco - Open source for Telco's including technologies and standards related to Core Network, RAN/vRAN, SoNIC, DENT, and SmartNICs
Finance - Open source solutions for financial institutions including trading platforms, blockchain technologies, regulatory compliance, and AI-driven analytics
Automotive - Open source solutions for autonomous driving, in-vehicle infotainment, connected vehicles, and compliance with automotive industry standards such as ISO 26262 and ISO 21434
Application Management - Open source solutions in the enterprise including Observability, IAM, App Stores and technologies such Grafana, GitOps, and Juju Charms
If your domain of expertise isn’t listed above, yet you feel it’s relevant to Canonical, then feel free to apply anyway. We will route you to the most suitable team.
Location:
These roles are home based in the EMEA time zone. You will be expected to be located in this region.
The role entails
Lead the product development lifecycle, reviewing the priorities and goals for your product
Collaborate with cross-functional teams such as engineering, design, marketing, and sales
Address common challenges across projects, align on priorities, enable informed decisions, and keep business execution on track
Conduct market research, analyse industry trends, and gather customer feedback to identify opportunities
Communicate your product vision, status updates, and key decisions to ensure alignment and manage expectations
Conduct usability testing, analyse user feedback, and iterate on the product to improve the user experience
Collaborate with marketing, sales, and support teams to develop go-to-market strategies, create product documentation, and provide training
Contribute to the success of our sales team in winning new opportunities, reviewing customer feedback and participating in customer meetings
Oversee the work of a product line, ensuring consistency in strategy and execution across different teams
Facilitate collaboration and resolve conflicts within different teams and across other departments
What we are looking for in you
Exceptional academic results at high school and university
Understanding of Linux and the wider open source software community
Understanding of computer architecture, application development, datacenters, cloud or devices
Passion to write about technologies and the tech landscape
A strong work ethic, and personal interests aligned with the open source movement
Curiosity, and the habit of continuous learning
A strong sense of ownership
Problem solving and the ability to innovate
Outstanding communications skills in English, both verbal and written
For more senior positions, product management experience in the software industry
Ability to manage multiple projects or product lines while maintaining focus on key priorities
Demonstrated leadership in aligning diverse teams and driving consensus around product strategies
Willingness to travel internationally up to 4 times a year for company events up to two weeks long
Additional skills that we value
Familiarity with a particular verticals (e.g. Telco, Finance, Industrial, Automotive)
Familiarity with the technology ecosystem including Silicon, IHV, ISV, ODM/OEMs, cloud service providers and channel
Familiarity with cloud native technologies such as Kubernetes, Docker containers & Snaps
Familiarity with embedded and connected device technology and ecosystems
Familiarity with networking technologies - ethernet, IPv4 and IPv6, routing, firewalling, overlays such as OVN/OVS, VPNs, SR-IOV, infiniband
Familiarity with telco networking - RAN, Core, CPE
Experience in leading distributed teams across different time zones
Demonstrated ability to foster collaboration and innovation in team settings
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus or commission. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Program
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world of software. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Most colleagues at Canonical have worked from home since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
We have opened several senior/staff Security Operations Engineer (SOC) positions, creating a new team reporting to the CISO. We are looking for a range of experience in these positions - at the high end we are looking for deep experience defending highly contested critical assets and high-value cyber targets against advanced persistent threats and state-level actors. We have more junior roles for exceptional individuals with a proven personal interest an engagement in cyber attack and defence, and outstanding academic and career performance even if experience is limited.
Our goal is to build an entirely new level of assurance and observable rigour into the open source supply chain. We have our own estate to monitor, but more broadly our goal is to raise the robustness of the entire global Ubuntu estate through the work of this team.
The Security Operations (SecOps) team is responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
What you will do in this role:
Implement and evolve Canonical's SecOps security standards and playbooks
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
An exceptional academic track record
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Expertise in threat modelling and risk management frameworks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
Experience with security standards such as ISO 27001
Optional things we value
Experience in a security operations team or a security operations centre (SOC)
Experience in offensive or defensive security teams with hands-on ability
Experience with state-actor and other advanced persistent threats
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
As the most widely used Linux distribution, Ubuntu underpins the security of the entire internet. The role of Security Engineering Manager directly impacts the safety and security of millions of users worldwide. Join a team of security experts dedicated to protecting the open-source ecosystem and driving innovation. Your leadership will be instrumental in addressing emerging threats, developing robust security measures, and ensuring the continued integrity of Ubuntu. This is an opportunity to make a tangible difference and leave a lasting legacy on the digital landscape.
As we place ever more trust in software and data security in our increasingly connected world, Canonical’s mission to deliver the world’s best open source platform comes with a responsibility: to set the highest possible standard for software security, not only for the OS, but also for the wide range of open source infrastructure and software that developers enjoy within the Ubuntu ecosystem. With Canonical’s Ubuntu being the leading open source platform for large-scale cloud and edge deployments, we are increasingly called upon to help customers meet strict security requirements such as FIPS, CIS, STIG, FedRAMP and the new CRA.
This role is about leading the charge to set the security standards for open source software across the Ubuntu platform, from desktops, servers and edge devices to cloud infrastructure, Kubernetes and OpenStack, by certifying core components to meet industry standards and guiding development teams across the company in security best practices. We work primarily within the areas of cryptographic modules (FIPS 140) and system hardening, where we collaborate with industry partners including CIS and DISA to define and build secure operating system deployments.
An Engineering Manager is responsible for line management and career guidance. The ability to develop engineering talent, to represent your team and product from a technical perspective, and to drive collaboration with other teams and customers are all critical to success in this role.
What you will do in this role
Lead and develop a team of engineers, ranging from graduate to senior
Coach, mentor, and offer career development feedback
Identify and measure team health indicators
Implement disciplined engineering processes
Represent your team and product to stakeholders, partners, and customers
Develop and evangelise great engineering and organisational practices
Plan and manage progress on agreed goals and projects
Support our products and customers to meet strict product security requirements such as FIPS, CIS, STIG, FedRAMP and the new CRA
Support the work addressing specific cryptography modules (FIPS 140) and system hardening efforts with indrustry partners, including CIS and DISA
What we are looking for in you
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive, and a track record of going above-and-beyond expectations
Excellent verbal and written communication skills in English
A love of developing and growing people and a track record of it
Organised and able to ensure your team delivers timely, high quality results
Professional manner interacting with colleagues, partners, and community
Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards
Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code)
Knowledgeable and passionate about software and application security
Solid experience working in an agile development environment
A demonstrated drive for continual learning
Builds trust, relationships and confidence
Result-oriented, with a personal drive to meet commitments
Ability to travel twice a year, for company events up to two weeks each
Optional things we value
Hands-on domain knowledge of Linux cryptography libraries (OpenSSL, GnuTLS)
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
In security risk management we’re looking to harness the power of industry best practice combined with driving new innovation on how we do security risk assessments and modelling. Our security risk management team is the primary owner of the strategy and practices of how we identify, track and reduce our security risk across everything we do.
To support this we need to use industry best practices paired with emerging threat information to to promote risk identification, quantification, impact analysis, and modelling to ultimately drive decision making. In this role, you will help establish and execute a broad strategic vision for the security risk program at Canonical. You will not only work within the team but also cross-functionally with various teams across the organisation. The team contributes ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attacks. Additionally, the team collaborates with our Organisational Learning and Development team to develop playbooks and facilitate security training across Canonical.
The security risk management team’s mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
What you will do in this role:
Define Canonical's security risk management standards and playbooks
Analyse and improve Canonical's security risk practices
Evaluate, select and implement new security requirements, tools and practices
Grow the presence and thought leadership of Canonical security risk management practice
Develop Canonical security risk learning and development materials
Work with Security leadership to present information and influence change
Participate in developing key risk indicators, provide inputs to the development of key control indicators, and key performance indicators for various programs
Apply statistical models to risk frameworks (such as FAIR, sensitivity analysis, and others)
Participate in risk management, decision-making, and collaborative discussions
Lead quantified risk assessments and understand the value of qualitative data for improvements to quality and engineering processes
Interpret internal or external cyber security risk analyses in business terms and recommend a responsible course of action
Develop templates and materials to help with self-service risk management actions
Monitor and identify opportunities to improve the effectiveness of risk management processes
Launch campaigns to perform security assessments and help mitigate security risks across the company
Build evaluation methods and performance indicators to measure efficiency of security functions and capabilities.
What we are looking for
An exceptional academic track record
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Leadership and management ability
Excellent business English writing and presentation skills
Problem-solver with excellent communication skills, a deep technical understanding of security assessments and risk management
Expertise in threat modelling and risk management frameworks
Broad knowledge of how to operationalize the management of security risk
Experience in Secure Development Lifecycle and Security by Design methodology
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
The Canonical Security Operations team is hiring for a Senior or Staff engineer. The Security Operations team is responsible for designing, building, and operating a world-class Security Operations Center, and the successful candidate will provide leadership, mentorship, expertise, and outstanding individual contributions towards those ends.
This role involves aspects of:
Traditional SOC duties - security monitoring, threat hunting, and response.
Security engineering - assessing and protecting Canonical platforms and products.
Software engineering - building custom tools and platforms.
Site reliability engineering - deploying, maintaining, and automating security tools.
We are looking for individuals with engineering and security experience, as well as a history of remarkable achievement. Senior security operations personnel with engineering experience and senior developers with security experience are equally well-suited to this role.
Beyond securing Canonical’s digital estate, this position represents a unique opportunity to contribute to the open source ecosystem. Team members may present at industry conferences, share threat intelligence with the wider community, or publish open source security software.
Junior positions are also available for less-experienced individuals with a compelling academic or professional background.
In this role, you will:
Provide operational and engineering leadership.
Implement and evolve Canonical’s Security Operations Center.
Design and develop security software and platforms.
Monitor for, identify, respond to, and remediate security incidents.
Assess and improve Canonical’s security controls.
Mentor early-career Security Operations engineers.
Plan and deliver work within Canonical's agile engineering framework.
Contribute to open source security.
Publish blog posts, whitepapers and conference presentations.
We are looking for:
An exceptional academic track record.
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path.
10+ years of relevant professional experience
Professional cybersecurity experience, preferably working or leading a Security Operations Center.
Professional engineering experience.
An eagerness to contribute to open source security.
Proficiency in common scripting languages, such as Python and Bash.
Knowledge of Git, GitOps, Infrastructure-as-Code, and common orchestration platforms (e.g., Kubernetes)
Though optional, we value:
Familiarity with security frameworks such as the NIST CSF, CIS CSC, and ISO 27001
Knowledge of security architecture and market-leading security tools.
Experience in a security operations team or a security operations center.
Experience in offensive or defensive security teams with hands-on ability.
Experience with advanced persistent threats.
Proficiency in additional programming languages, such as Golang.
What we offer you:
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
This global leadership role in cyber security is to manage the Security Operations (SecOps) team responsible for design, implementation and evolution of Canonical security practices, techniques, tools, systems and policies. The team is the primary owner of strategy and practices that determine how Canonical secures its data, internal infrastructure and build processes. They are responsible for assuring the security and integrity of our own infrastructure and product deployments. They design and implement technical security controls that ensure security threats are automatically identified, contained and remediated. The team will also contribute ideas and requirements for Canonical product security, improving the resilience and robustness of all Ubuntu customers and users subject to cyber attack.
As a leader on cyber security in the company, the SecOps team manager will collaborate with our Organisational Learning and Development team to develop playbooks and facilitate SecOps training across Canonical. They will operate in a wider security organisation, run a high performing security team and improve Canonical's security posture. They will lead initiatives to integrate the team's insights into Canonical's broader software development process.
While this is a management position, we expect managers to be expert practitioners, able to lead by example, contribute at the highest level, and assess work based on their own professional experience and skill. Candidates should have deep, hands-on expertise with a range of open source and proprietary security tooling and practices, which they can integrate into a holistic next generation security solution across the breadth of Canonical's interests.
The SecOps team's mission is not only to secure Canonical, but also to contribute to the security of the wider open source ecosystem. They might share knowledge through public presentations and industry events, and share threat intelligence with the wider community or represent Canonical in sector-specific governance bodies.
This role reports to the CISO.
What you will do in this role:
Hire and mentor a team of outstanding technical security professionals
Define Canonical's SecOps security standards and playbooks
Own and drive the architecture and design of the SOC
Analyse and improve Canonical's security architecture
Evaluate, select and implement new security tools and practices
Identify, contain and guide the remediation of security threats and cyber attacks
Grow the presence and thought leadership of Canonical SecOps practice
Contribute to open source threat intelligence initiatives
Drive threat modelling, table top exercises and other SecOps practices across Engineering, IS and Canonical
Develop Canonical SecOps learning and development materials
Publish blog posts, whitepapers and conference presentations
Identify, implement and track SecOps KPIs
Plan and deliver SecOps work in the framework of Canonical's agile engineering practice
Work with Security leadership to present information and influence change
What we are looking for
Proven track record of mitigating with advanced threat actors and nation state threats
Expert technical understanding of SOCs from the ground up
In depth knowledge of SOC architecture and design including strategies for logging, firewalls, network segmentation, honeypots etc
Someone who understands how the SOC works not just how to use it
Expert in Linux security
Ability to define, implement, automate and measure effective incident response playbooks
Knowledge of security architecture and market-leading security tools
Experience contributing to, and consuming, threat intelligence feeds
Experience in security risk management frameworks such as NIST CSF
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
Drive and a track record of going above-and-beyond expectations
Deep personal motivation to be at the forefront of technology security
Leadership and management ability
Excellent business English writing and presentation skills
Confidence to report security performance metrics with accountability for accuracy and completeness
Optional things we value
Experience in offensive or defensive security teams with hands-on ability
Experience with open source security tools
Experience with security standards such as ISO 27001
Experience with security posture management of corporate endpoitns
Location: Home based - Worldwide
Canonical is a leading provider of open source software and operating systems to the global enterprise and technology markets. Our platform, Ubuntu, is widely used in breakthrough enterprise initiatives such as public cloud, data science, AI, engineering innovation, and IoT. Our customers include the world's leading public cloud and silicon providers, and industry leaders in many sectors. The company is a pioneer of global distributed collaboration, with 1200+ colleagues in 75+ countries and very few office-based roles. Teams meet two to four times yearly in person, in interesting locations around the world, to align on strategy and execution.
The company is founder-led, profitable, and growing.
Canonical is looking for exceptional security-focused software engineers to be integrated across product teams. While they also contribute to the product as engineers, their primary focus is to challenge the entire team to think more deeply about security through state-of-the-art practices such as threat modeling, table-top exercises, architecture and design reviews, static analysis tools, and fuzzing, among others.
These roles encompass all aspects of product security, including feature development, vulnerability response, proactive security, and open source community participation. Engineers in these roles collaborate closely with other Canonical teams, customers, and partners across the open source ecosystem.
Each product engineering team at Canonical reserves one or two openings for security-oriented software engineers. We also develop a number of products driven entirely by security needs, such as our AppArmor kernel investments and the Ubuntu Security Guide (USG). As the publisher of Ubuntu, we also handle long-term security response for the entire operating system and open source ecosystem. Working with tens of thousands of upstreams means that we need to be fluent in every major programming language and design, build, and adopt sophisticated tools that enable us to work at scale and speed with confidence.
Apply here if you are an exceptional security-focused software engineer, passionate about open source, and excited by Canonical's products and mission.
This role requires the ability to be productive in a globally distributed team through strong self-discipline and motivation. It also involves mandatory international travel at least twice a year, typically for one week.
Location: Worldwide, this is a globally remote role
What you'll do
Security roles might tackle any of the following:
Define, implement, and document new security features
Lead security-focused initiatives within a product engineering team
Analyze, fix, and test vulnerabilities in open source software
Contribute to Ubuntu and upstream open source projects to benefit the community
Audit and analyze source code for vulnerabilities
Integrate new tools into our security infrastructure, pipelines, and processes
Achieve and retain various security certifications
Extend and enhance Linux cryptographic components to meet country-specific compliance requirements, such as FIPS and Common Criteria (CC) certifications
Work with external partners to develop Center for Internet Security (CIS) benchmarks
Design and develop hardening automation for Ubuntu
Stay up to date with trends and developments in the security industry
Develop, test, and maintain new software capabilities
Provide guidance and support to other engineering teams on security best practices
What we are looking for in you
An exceptional academic track record from both high school and university
Undergraduate degree in Computer Science or STEM, or a compelling narrative about your alternative path
A track record of going above and beyond expectations
Thorough understanding of the common categories of security vulnerabilities and how to fix them
Knowledge of modern software engineering techniques
Familiarity with open source development tools and methodologies
Skill in one or more of C, C++, Python, Go, Rust, Java, Ruby, PHP, or JavaScript/Typescript
Experience as a security champion
Experience driving security within a wider SSDLC process
Professional written and spoken English
Experience with Linux (Debian or Ubuntu preferred)
Excellent interpersonal skills, curiosity, flexibility, and accountability
Passion, thoughtfulness, and self-motivation
Excellent communication and presentation skills
Results-oriented, with a personal drive to meet commitments
Optional skills we also value
Clear and effective communication with both the team and Ubuntu community members
Experience working with the Linux kernel
Experience with security certifications and knowledge of FIPS and/or Common Criteria (CC)
Experience with OVAL (Open Vulnerability Assessment Language)
Knowledge of cryptographic modules such as OpenSSL and Libgcrypt
Knowledge of low-level Linux cryptography APIs
Demonstrated ability to learn quickly
Performance engineering experience
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognize outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues
Priority Pass, and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004. Working here is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-remote
Location: Home based - Worldwide
This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant to international information security standards such as FIPS 140-3 and Common Criteria. You will use your applied cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and work with organizations such as DISA and CIS to draft and implement security hardening benchmarks for Ubuntu.
As a member of the Security Hardening team you will work with and develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance. You will interact with internal and external stakeholders to identify gaps in our frameworks, and develop new solutions to address these challenges. In this role you will have the opportunity to influence team and security culture, facilitate technical delivery, and help drive team direction and execution. You’ll collaborate closely with Canonical’s kernel team as well as the wider engineering organization to drive features impacting all Ubuntu users.
Day-to-day responsibilities
Collaborate with other engineers in the Security Hardening team to achieve and retain various Security certifications
Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, and others) with the features and functionality required for FIPS and CC certification
Collaborate with external security consultants to test and validate kernel and crypto module components
Work with external partners to develop security hardening benchmarks and audit + remediation automation for Ubuntu
Contribute to Ubuntu mainline and upstream projects to land solutions and benefit the community
Communication and collaboration within and outside Canonical to identify opportunities to improve our security posture, rapidly resolve issues, and deliver high-quality solutions on schedule
What we are looking for in you
Hands-on experience with low-level Linux cryptography APIs and debugging
Excellent software engineering fundamentals, including prior experience with C development, and the ability to demonstrate such
Hands-on experience with Linux system administration and shell scripting
Demonstrated knowledge of security and cryptography fundamentals + direct experience writing secure code and implementing best practices
Significant development experience working with open source libraries
Excellent verbal and written communications to enable efficient collaboration with internal and external partners in a remote-first environment
Additional skills that you might also bring
Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards
Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code)
Experience working directly with Linux Kernel
Prior experience with Python, OVAL (Open Vulnerability Assessment Language), and Ansible
History of contributions to open source projects
What we offer you
We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally.
Distributed work environment with twice-yearly team sprints in person - we’ve been working remotely since 2004!
Personal learning and development budget of USD 2,000 per year
Annual compensation review
Recognition rewards
Annual holiday leave
Maternity and paternity leave
Employee Assistance Programme
Opportunity to travel to new locations to meet colleagues from your team and others
Priority Pass for travel and travel upgrades for long haul company events
About Canonical
Canonical is a pioneering tech firm that is at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence - in order to succeed, we need to be the best at what we do.
Canonical has been a remote-first company since its inception in 2004. Work at Canonical is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical provides a unique window into the world of 21st-century digital business.
Canonical is an equal opportunity employer
We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products.
Whatever your identity, we will give your application fair consideration.
#LI-Remote
San Francisco, CA • New York, NY • United States
ГибридNew York, NY (HQ); San Francisco, CA; Remote (US); Relocation expense coverage to NYC or SF (if needed)
ГибридRelocation expense coverage to NYC or SF (if needed)
УдалённоUSA (Remote)
seniorWashington, District of Columbia, United States
УдалённоSeattle, WA; San Francisco Bay Area
seniorГеография найма не уточнена
УдалённоRemote: United States; Remote: Canada
УдалённоHome based - EMEA
УдалённоМожно работать из любой страны
УдалённоМожно работать из любой страны
УдалённоМожно работать из любой страны
УдалённоseniorМожно работать из любой страны
УдалённоheadМожно работать из любой страны
УдалённоМожно работать из любой страны
УдалённоМожно работать из любой страны
Все вакансии в одном месте — страница 13 · Job Hunters