← All roles

Senior Security Engineer, Docker Desktop

Docker· Engineering
Apply on company site
RemoteCA$271.2k - CA$434kFull-timePosted 5mo ago

About the role

Senior Security Engineer embedded in the Docker Desktop engineering team responsible for the security posture of a cross-platform product, reviewing features and code, coordinating with central security, and triaging vulnerabilities.

Responsibilities

  • Partner with engineering and product teams throughout the development lifecycle to identify security risks early, from design review through code review and release.
  • Conduct threat modeling and security design reviews for new and evolving product features, focusing on authentication, authorization, and container runtime security.
  • Serve as the team's primary liaison to the organization's security group, attending security syncs, relaying guidance, and translating central policy into practical engineering decisions.
  • Act as the first point of contact for incoming vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation with the relevant engineers.
  • Review Go code with a security mindset, identifying classes of issues such as privilege escalation, insecure defaults, injection risks, and improper credential handling.
  • Contribute security-focused improvements directly to the codebase where appropriate.
  • Develop and maintain internal security documentation, guidelines, and runbooks for the team.
  • Stay current on the Linux security landscape as it pertains to containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the evolving OCI ecosystem.
  • This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed.

Qualifications

  • 6+ years of experience in security engineering, application security, or a closely related discipline, with a track record at senior or staff level.
  • Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience.
  • Strong proficiency in Go, with the ability to review and contribute to production-grade code.
  • Deep understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries.
  • Solid grasp of OCI specifications and container runtime security (e.g. runc, containerd, BuildKit).
  • Hands-on experience with identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts.
  • Experience performing security design reviews, threat modeling, and participating in secure development workflows.
  • Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters.
  • Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team.

Skills

Required:GoThreat modelingLinux container securityGo code reviewCommunication
Nice to have:OAuth 2.0 / OIDCVulnerability management

Benefits

  • Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
  • Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
  • Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
  • Home office support – Set up your workspace for comfort and success.
  • Technology stipend – Equivalent to US$100 net per month to help support your work.
  • Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
  • Parental leave – 16 weeks of paid parental leave after six months of employment.
  • Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
  • Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
  • Docker swag – Representing the whale in style.
Last updated Aug 19, 2026. Interested? Apply on the company site.
Docker logo

About Docker

Accelerated Container Application Development

Docker is a platform designed to help developers build, share, and run container applications. We handle the tedious setup, so you can focus on the code.

ContainerizationDevOpsCloud InfrastructureSecurityOpen Source
Company profileWebsite

More open roles at Docker