[All remote jobs](https://jobicy.com/jobs.md)[![Canonical logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b4d068a9-221-1.png)](https://jobicy.com/company/canonical-ltd.md)[Canonical](https://jobicy.com/company/canonical-ltd.md) # Linux Cryptography and Security Engineer AI Summary This role develops and maintains Linux cryptographic and security capabilities for Ubuntu, with a strong focus on FIPS 140-3 and Common Criteria certification. The engineer enhances components such as OpenSSL, Libgcrypt, and GnuTLS while collaborating with kernel engineers, external consultants, DISA, and CIS. Core work includes secure C development, Linux security administration, compliance automation, and security-hardening benchmarks. The position also contributes upstream solutions and helps shape the Security Hardening team's technical direction in a distributed environment.[Apply for this job](#job-application)[View company](https://jobicy.com/company/canonical-ltd.md)ShareRemote fromšŸŒ AnywhereSalaryUndisclosedDepartment[Cybersecurity](https://jobicy.com/categories/cybersecurity.md)EmploymentFull TimeExperienceOpen levelPublished12 Nov 2026Apply before12 Dec 2026Listing views64Application actions4Application toolkit ## Make your next move. Prepare your resume, explore your fit, and draft a cover letter for this opportunity. Opportunity details ## About this role. This is a unique opportunity to use your software engineering and cryptography skills to build and maintain the security foundation that enables Ubuntu and its users to operate securely and remain compliant to international information security standards such as FIPS 140-3 and Common Criteria. You will use your applied cryptography, Linux Security, and coding skills to enhance the Ubuntu distribution and work with organizations such as DISA and CIS to draft and implement security hardening benchmarks for Ubuntu. As a member of the Security Hardening team you will work with and develop automation tooling to audit deployed systems for DISA-STIG and CIS benchmark compliance. You will interact with internal and external stakeholders to identify gaps in our frameworks, and develop new solutions to address these challenges. In this role you will have the opportunity to influence team and security culture, facilitate technical delivery, and help drive team direction and execution. Youā€™ll collaborate closely with [Canonical](https://jobicy.com/company/canonical-ltd.md)ā€™s kernel team as well as the wider engineering organization to drive features impacting all Ubuntu users. ### Day-to-day responsibilities * Collaborate with other engineers in the Security Hardening team to achieve and retain various Security certifications * Extend and enhance Linux cryptographic components (OpenSSL, Libgcrypt, GnuTLS, and others) with the features and functionality required for FIPS and CC certification * Collaborate with external security consultants to test and validate kernel and crypto module components * Work with external partners to develop security hardening benchmarks and audit + remediation automation for Ubuntu * Contribute to Ubuntu mainline and upstream projects to land solutions and benefit the community * Communication and collaboration within and outside Canonical to identify opportunities to improve our security posture, rapidly resolve issues, and deliver high-quality solutions on schedule ### What we are looking for in you * Hands-on experience with low-level Linux cryptography APIs and debugging * Excellent software engineering fundamentals, including prior experience with C development, and the ability to demonstrate such * Hands-on experience with Linux system administration and shell scripting * Demonstrated knowledge of security and cryptography fundamentals + direct experience writing secure code and implementing best practices * Significant development experience working with open source libraries * Excellent verbal and written communications to enable efficient collaboration with internal and external partners in a remote-first environment ### Additional skills that you might also bring * Prior experience working on FIPS/Common Criteria certified products and in-depth knowledge of the underlying standards * Prior experience working directly with DISA-STIG or CIS benchmarks, including related audit + remediation tooling (e.g. Compliance as Code) * Experience working directly with Linux Kernel * Prior experience with Python, OVAL (Open Vulnerability Assessment Language), and Ansible * History of contributions to open source projects ### What we offer you We consider geographical location, experience, and performance in shaping compensation worldwide. We revisit compensation annually (and more often for graduates and associates) to ensure we recognise outstanding performance. In addition to base pay, we offer a performance-driven annual bonus. We provide all team members with additional benefits, which reflect our values and ideals. We balance our programs to meet local needs and ensure fairness globally. * Distributed work environment with twice-yearly team sprints in person ā€“ weā€™ve been working remotely since 2004! * Personal learning and development budget of USD 2,000 per year * Annual compensation review * Recognition rewards * Annual holiday leave * Maternity and paternity leave * Employee Assistance Programme * Opportunity to travel to new locations to meet colleagues from your team and others * Priority Pass for travel and travel upgrades for long haul company events ### About Canonical Canonical is a pioneering tech firm that is at the forefront of the global move to open source. As the company that publishes Ubuntu, one of the most important open source projects and the platform for AI, IoT and the cloud, we are changing the world on a daily basis. We recruit on a global basis and set a very high standard for people joining the company. We expect excellence ā€“ in order to succeed, we need to be the best at what we do. Canonical has been a remote-first company since its inception in 2004.ā€‹ Work at Canonical is a step into the future, and will challenge you to think differently, work smarter, learn new skills, and raise your game. Canonical provides a unique window into the world of 21st-century digital business. ### Canonical is an equal opportunity employer We are proud to foster a workplace free from discrimination. Diversity of experience, perspectives, and background create a better work environment and better products. [Whatever your identity, we will give your application fair consideration.](https://canonical.com/careers/diversity/identity) #LI-Remote Show more [Apply now >](https://jobicy.com/jobs/161678-linux-cryptography-and-security-engineer.md) > Annual salary information is not provided for this position. Explore salary ranges for similar roles in our [Salary Directory ā€ŗ](https://jobicy.com/salaries.md) * ![Upload CV](data:image/svg+xml;base64,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) ### Upload your resume now To unlock remote work opportunities and be discovered by global employers. This job listing has been manually reviewed by the Jobicy Trust & Safety Team for compliance with our posting guidelines, including verification of the company's legitimacy, accuracy of job details, clarity of remote work policy, and absence of misleading or fraudulent content. ## Role DNA A quick view of the complexity, pace, ownership and collaboration implied by the job description. ### Job Complexity 5/5EasyHard ### Pace & Pressure 4/5RelaxedFast-paced ### Autonomy Level 4/5GuidedFull ownership ### Communication Load 4/5IndependentCollaborative AI insightThe role requires deep expertise across low-level Linux development, applied cryptography, security certification, and open-source engineering. Delivery involves complex external standards, upstream collaboration, and high-impact security requirements. ## Salary analysis Estimated compensation compared with the broader US market for similar roles. Estimated job median (per year)Market rate$165,000US market range (per year)$135kā€“$205k0$225.50k AI insightThe yearly pay period is inferred from the job context; it was not explicitly stated by the employer. No employer base-pay amount is disclosed. Compensation is estimated in USD per year based on the seniority and specialized Linux cryptography, certification, and security engineering requirements; the yearly period is inferred from standard full-time professional market conventions. ## Core skills Skills and capabilities most closely associated with this opportunity. [Linux security](https://jobicy.com/jobs?search_keywords=Linux%20security.md)[Applied cryptography](https://jobicy.com/jobs?search_keywords=Applied%20cryptography.md)[C programming](https://jobicy.com/jobs?search_keywords=C%20programming.md)[OpenSSL](https://jobicy.com/jobs?search_keywords=OpenSSL.md)[GnuTLS](https://jobicy.com/jobs?search_keywords=GnuTLS.md)[Libgcrypt](https://jobicy.com/jobs?search_keywords=Libgcrypt.md)[FIPS 140-3](https://jobicy.com/jobs?search_keywords=FIPS%20140-3.md)[Common Criteria](https://jobicy.com/jobs?search_keywords=Common%20Criteria.md)[Linux system administration](https://jobicy.com/jobs?search_keywords=Linux%20system%20administration.md)[Shell scripting](https://jobicy.com/jobs?search_keywords=Shell%20scripting.md)[Secure coding](https://jobicy.com/jobs?search_keywords=Secure%20coding.md)[DISA-STIG](https://jobicy.com/jobs?search_keywords=DISA-STIG.md)[CIS Benchmarks](https://jobicy.com/jobs?search_keywords=CIS%20Benchmarks.md)[Python](https://jobicy.com/jobs?search_keywords=Python.md)[Ansible](https://jobicy.com/jobs?search_keywords=Ansible.md) Sample interview questionsHow have you worked with low-level cryptographic APIs in Linux?I have used cryptographic libraries and system APIs to integrate encryption, hashing, key handling, and certificate validation into Linux software. I focus on correct API usage, secure defaults, robust error handling, and testing against known cryptographic test vectors. What would be your approach to preparing a Linux cryptographic component for FIPS validation? I would first map the applicable FIPS requirements to the component's architecture, approved algorithms, operating environment, and cryptographic boundary. I would then implement required controls, create reproducible builds and test evidence, coordinate laboratory validation, and maintain documentation throughout remediation and submission. How would you automate DISA-STIG or CIS benchmark auditing and remediation? I would translate benchmark controls into versioned, testable rules with clear applicability logic and evidence output. I would use tools such as Ansible, shell scripts, and Compliance as Code where appropriate, while ensuring remediation is idempotent, reversible where possible, and validated in representative environments. How do you identify and mitigate security issues in C code? I combine secure design review with compiler warnings, static analysis, fuzzing, sanitizers, code review, and targeted runtime testing. I pay particular attention to memory safety, integer handling, input validation, error paths, concurrency, secret lifecycle management, and unsafe cryptographic assumptions. How would you collaborate with upstream projects and external security consultants during a certification effort? I would establish clear technical requirements, issue tracking, ownership, and evidence expectations early. For upstream work, I would submit focused patches with tests and engage maintainers constructively; with consultants, I would provide reproducible builds, timely technical responses, and documented remediation plans. Next step ## Apply now. Follow the employerā€™s application method and review Jobicyā€™s safety guidance before sharing personal information. Keep exploring ## Related remote jobs. * ![Latent logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/c872d1ae22b7-221.webp) Latent Nov 12 New ### [Security Engineer](https://jobicy.com/jobs/161597-security-engineer-7.md) About Latent Latent is the enterprise pharmacy intelligence platform, powered by a clinical agentic engine, that enables health systems to grow their pharmacy operations and serve more patients. One engineā€¦ * ![Workleap logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/b84329e1-221.png) Workleap Nov 12 New ### [Staff Security Operations Specialist, LeapSec](https://jobicy.com/jobs/161595-staff-security-operations-specialist-leapsec.md) Company Description Workleap is a Montreal-based tech company, founded in 2006. Weā€™re builders at heart, we make simple products that actually matter to the people who use them. We haveā€¦ * ![Samsara logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/dd26f5ca-221.jpg) Samsara Nov 12 New ### [Senior Security Engineer ā€“ Enterprise Security](https://jobicy.com/jobs/161583-senior-security-engineer-enterprise-security.md) Who we are Samsara (NYSE: IOT) is the pioneer of the Connected Operationsā„¢ Cloud, which is a platform that enables organizations that depend on physical operations to harness Internet ofā€¦ * ![Bogaard Group International logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2026/11/1ccf014fc152-221.webp) Bogaard Group International Nov 12 New ### [Lead Security Systems Solutions Engineer](https://jobicy.com/jobs/161571-lead-security-systems-solutions-engineer.md) Position Overview We are looking for an experienced Lead Security Systems Solutions Engineer to be embedded at a leading global technology and entertainment company. The Lead Security Systems Solutions Engineerā€¦ * ![Dropbox logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2020/09/WRILS-200923071227-398427.jpg) Dropbox Nov 12 New ### [Security Engineer, IAM](https://jobicy.com/jobs/161544-security-engineer-iam.md) Role Description Security Engineers at Dropbox safeguard our digital ecosystem alongside a diverse team of professionals dedicated to protecting our products and users. Trusted by millions, our mission is toā€¦ * ![Fleetio logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2023/07/e571b83c37e0ed5371754d319be16e76.jpeg) Fleetio Nov 12 New ### [Senior Security Operations Engineer](https://jobicy.com/jobs/161527-senior-security-operations-engineer-5.md) A little about usā€¦Fleetio is a modern software platform that helps thousands of organizations worldwide manage their fleet operations. Transportation technology is a hot market, and weā€™re leading the chargeā€¦ * ![TRM Labs logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/34aa038c-221.png) TRM Labs Nov 12 New ### [Senior Blockchain Intelligence Analyst, Ransomware](https://jobicy.com/jobs/155136-senior-blockchain-intelligence-analyst-ransomware.md) Build a Safer World. TRM Labs provides AI-powered intelligence solutions that help public and private sector agencies investigate and disrupt crime. TRMā€™s platforms enable investigators to trace illicit activity, buildā€¦ * ![Huntress logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2025/06/91eae3ae-221.jpg) Huntress Nov 12 New ### [Security Operations Analyst- Ireland](https://jobicy.com/jobs/155141-security-operations-analyst-ireland.md) What We Do: Cybercrime is growing, and more businesses are getting hit by threats that used to target only the biggest organizations. That pushes defenders like us to operate atā€¦ * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 12 New ### [Blockchain Security Expert ā€“ Chain Security Evaluation Track](https://jobicy.com/jobs/152970-blockchain-security-expert-chain-security-evaluation-track.md) About You Youā€™re a self-starter who thrives on tackling the toughest and most meaningful problems, even if they are the most difficult problems. Youā€™re comfortable with the unknown and understandā€¦ * ![CertiK logo](https://jobicy.com/data/server-nyc0409/galaxy/mercury/2021/03/Jobicy-210308091023-955845.jpg) CertiK Nov 12 New ### [Blockchain Security Expert ā€“ Anti Defect Track](https://jobicy.com/jobs/152966-blockchain-security-expert-anti-defect-track.md) About the Company Founded in 2018 by professors of Yale University and Columbia University, CertiK is a pioneer in blockchain security, utilizing best-in-class AI technology to secure and monitor blockchainā€¦ [Browse all jobs](https://jobicy.com/jobs.md)