Job Description
Key Responsibilities
- Support the Security Certifications engineers to achieve and retain various Security certifications.
- Work with the Manager on scoping, prioritization and resourcing for all team's deliverable.
- Extend and enhance Linux cryptographic components - specifically with modules such as OpenSSL/Libgcrypt - with the features and functionality required for FIPS and CC certification.
- Collaborate with external security consultants to test and validate kernel and crypto components, achieve and retain FIPS and CC certification, and develop CIS benchmarks and STIGs for Ubuntu.
- Work in partnership with the internal project manager to ensure delivery against project goals and milestones, identifying technical risks and mitigating them
- Contribute to Ubuntu mainline and upstream projects to land solutions and benefit the community.
- Contribution to continuous integration infrastructure: automated testing and validation.
- Self-discipline and self-motivation to support and perform day-to-day engineering activities and deliver to schedules in a globally distributed team.
- Communication and collaboration within and outside Canonical to rapidly resolve issues and keep the project on track.
Required Skills and Experience
- Significant experience working with open source libraries.
- Knowledge of Linux Security and Cryptography.
- Experience with patching and associated tooling: identifying, isolating, applying and testing patches, and resolving any resulting issues.
- General Linux development skills (C proficiency, git experience, debugging with gdb).
- Experience with bash scripting.
Desired Skills and Experience:
- Software packaging and maintenance experience, especially using Debian packaging.
- Knowledge of and familiarity with low-level Linux cryptography APIs and debugging.
- Experience working with Linux Kernel.
- Familiarity with open source development tools and methodologies, especially those in common-use for development of the Linux ecosystem such as: Launchpad, IRC, and mailing-lists.
- Knowledge of security benchmarks such as STIG and CIS benchmarks.
- Security Certification experience and knowledge in FIPS and/or CC.
- Experience with OVAL (Open Vulnerability Assessment Language) and Go.
Employee Benefits
- Flexible working options/work from home
- Tuition and Training Reimbursement
- Annual Bonus Plan
- Holiday for Service (Annual Leave)
- Conference Leave
- Priority Pass
- Laptop Refresh Benefit