[Remote] Senior Security Engineer, Docker Desktop

Note: The job is a remote job and is open to candidates in USA. Docker is a globally distributed company that builds developer tools for building, sharing, and running applications, including Docker Desktop. The Senior Security Engineer will own the security posture of the cross-platform Docker Desktop product by conducting threat modeling and security reviews, triaging vulnerabilities, reviewing and contributing to Go code, and partnering with engineering and central security teams.

Responsibilities

• Partner with engineering and product teams throughout the development lifecycle to identify security risks early, from design review through code review and release
• Conduct threat modeling and security design reviews for new and evolving product features, with particular focus on authentication, authorization, and container runtime security
• Serve as the team's primary liaison to the organization's security group, attending security syncs, relaying guidance, and translating central policy into practical engineering decisions
• Act as the first point of contact for incoming vulnerability reports and CVEs: validate severity, reproduce issues, coordinate disclosure timelines, and drive remediation with the relevant engineers
• Review Go code with a security mindset, identifying classes of issues such as privilege escalation, insecure defaults, injection risks, and improper credential handling
• Contribute security-focused improvements directly to the codebase where appropriate
• Develop and maintain internal security documentation, guidelines, and runbooks for the team
• Stay current on the Linux security landscape as it pertains to containers: namespaces, cgroups, seccomp, AppArmor, capabilities, and the evolving OCI ecosystem
• This role may require participation in an on-call rotation to provide support outside of standard business hours, including evenings, weekends, and holidays, as needed

Skills

• 6+ years of experience in security engineering, application security, or a closely related discipline, with a track record at senior or staff level
• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent practical experience
• Strong proficiency in Go, with the ability to review and contribute to production-grade code
• Deep understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries
• Solid grasp of OCI specifications and container runtime security (e.g. runc, containerd, BuildKit)
• Hands-on experience with identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts
• Experience performing security design reviews, threat modeling, and participating in secure development workflows
• Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters
• Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team

Benefits

• Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
• Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
• Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
• Home office support – Set up your workspace for comfort and success.
• Technology stipend – Equivalent to US$100 net per month to help support your work.
• Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
• Parental leave – 16 weeks of paid parental leave after six months of employment.
• Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
• Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
• Docker swag – Because representing the whale never gets old.

Company Overview

Company H1B Sponsorship