Qualifications
Key Responsibilities:Collaborate with engineering and product teams throughout the development lifecycle to proactively identify security risks from design phases to code reviews and deployment. Perform threat modeling and security design assessments for new and existing product features, emphasizing authentication, authorization, and container runtime security. Act as the main point of contact for the organization's security group, participating in security meetings, communicating best practices, and translating central policies into actionable engineering guidelines. Serve as the first line of response for incoming vulnerability reports and CVEs by validating their severity, reproducing issues, coordinating disclosure timelines, and facilitating remediation efforts with relevant engineers. Review Go code with a security-focused perspective, pinpointing issues related to privilege escalation, insecure defaults, injection vulnerabilities, and inadequate credential management. Directly contribute to security enhancements in the codebase as necessary. Develop and maintain internal security documentation, guidelines, and operational procedures for the team. Remain updated on the evolving Linux security landscape and emerging threats.
About the job
Docker supports over 20 million developers each month with tools like Docker Desktop, Docker Hub, and Docker Scout. The company’s fully remote team builds secure, reliable solutions for containerized applications, emphasizing security as a core value, especially as autonomous and AI-driven workflows become more common.
Role overview
The Senior Security Engineer will join the Docker Desktop team to shape security architecture for a complex, cross-platform application. This product integrates identity management, OCI runtimes, and Linux kernel elements. The role leads security reviews, coordinates closely with Docker’s central security group, and acts as the main contact for vulnerability reports.
What you will do
- Design and maintain security architecture for Docker Desktop
- Review features and code for security issues before deployment
- Work closely with product engineers and the central security team
- Respond to vulnerability disclosures and coordinate mitigation efforts
- Emphasize threat modeling and clear communication across teams
Requirements
- Direct engineering experience in security
- Strong background in threat modeling
- Ability to communicate effectively with both engineers and security professionals
- Comfort working on cross-platform products involving identity, OCI runtimes, and Linux kernel internals
Location
This is a remote position open to candidates based in Canada.
About Docker, Inc.
Docker, Inc. is a leading provider of developer tooling, renowned for its commitment to innovation and quality. With a vast user base and a diverse product suite, Docker aims to empower developers to create and manage applications efficiently and securely.
