← All roles

Senior Security Engineer, Offensive Security

Docker· Security
Apply on company site
RemoteCA$271.2k - CA$434kFull-timePosted 1mo ago

About the role

Senior Security Engineer focusing on offensive security, responsible for applying penetration testing, threat modeling, and exploit development to surface and remediate risks across Docker’s products and infrastructure, across cloud, containers, and AI/ML features in a remote, global context.

Responsibilities

  • Contribute to security initiatives that align with business goals, helping ensure security is a core component of our products and infrastructure
  • Support and help implement key security programs such as automated security design reviews, and vulnerability management
  • Build deep knowledge of software security and architecture, and act as a go-to resource for engineering teams
  • Partner with engineering to design and implement security architecture and controls across Docker products and platforms
  • Plan, scope, and execute penetration tests and red-team / adversary-emulation engagements against Docker's products and services
  • Develop proof-of-concept exploits and produce clear, risk-rated findings with actionable remediation guidance, then retest fixes to confirm closure
  • Build and maintain offensive security tooling and automation to expand testing coverage and repeatability
  • Perform security reviews and threat modeling (design, architecture, and code) across Docker products and services, including emerging AI products, and write automated security tests and exploits
  • Serve on rotating on-call schedule to respond to security events, investigate threats, and coordinate remediation efforts
  • Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices
  • Participate in Security Incident response

Qualifications

  • Have 3+ years in security engineering, including hands-on offensive security and penetration testing across applications and infrastructure
  • Possess 2+ years of hands-on development experience in Python or Golang
  • Demonstrate deep expertise in authentication, authorization, including technologies like OAuth, cryptography applications and Zero Trust principles
  • Have strong hands-on experience with securing cloud ecosystems (e.g. AWS, GCP, Azure)
  • Have hands-on penetration testing experience across SaaS web applications and APIs., including manual exploitation beyond automated scanners
  • Are proficient with offensive tooling and techniques such as. Burp Suite, and OWASP frameworks
  • Can write security tests and develop exploits and proof-of-concepts that find real vulnerabilities in a product
  • Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks
  • Have practical experience using LLMs and agentic tooling to automate vulnerability discovery, reconnaissance, and pentesting workflows
  • Have a track record of building security programs and automations from scratch, applying risk-based prioritization
  • Have experience performing security reviews and building or improving security review automation
  • Have excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders
  • Understand industry standards, and actively keep up with emerging security technologies and models
  • Are a team player who drives security change via collaboration and cross-functional partnerships
  • Hold offensive security certifications such as OSCP, OSWE, OSEP, GXPN, GPEN, or CRTO
  • Have published CVEs, original security research, or conference talks

Skills

Required:Security design reviewsPenetration testingExploit developmentThreat modelingCloud securityOAuth / authentication & authorizationOffensive security toolingCommunicationAI/ML securityPython or Golang

Benefits

  • Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration
  • Flexibility that fits your life – We trust you to manage your schedule while delivering great work
  • Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break
  • Home office support – Set up your workspace for comfort and success
  • Technology stipend – Equivalent to US$100 net per month to help support your work
  • Learning & development – Annual stipend for conferences, courses, certifications, and continued learning
  • Parental leave – 16 weeks of paid parental leave after six months of employment
  • Equity for all full-time employees – Share in Docker's long-term success as we continue to grow
  • Comprehensive benefits – Medical, retirement, and paid holidays vary by country
  • Docker swag – Representing the brand with pride
Last updated Oct 7, 2026. Interested? Apply on the company site.
Docker logo

About Docker

Accelerated Container Application Development

Docker is a platform designed to help developers build, share, and run container applications. We handle the tedious setup, so you can focus on the code.

ContainerizationDevOpsCloud InfrastructureSecurityOpen Source
Company profileWebsite

More open roles at Docker