_______________________________________________________________________
RESPONSIBILITIES
6+ years of experience in product security, application security, or software engineering with a security focus, including time embedded with or partnered closely with product engineering teams.
Proficiency in Go (or a comparable systems language), with the ability to review security-sensitive code and ship production-quality fixes and tooling.
Solid understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries.
Solid grasp of container runtime security (e.g. runc, containerd, BuildKit) and OCI specifications.
Working knowledge of identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts.
Hands-on experience performing security design reviews and threat modeling for product features.
Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters.
Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team.
_______________________________________________________________________
QUALIFICATIONS
6+ years of software engineering experience, with meaningful exposure to security-sensitive systems or a strong personal interest in security.
Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience
Strong proficiency in Go, with a track record of writing and shipping production-grade code.
Solid understanding of Linux fundamentals relevant to container security: namespaces, cgroups, capabilities, seccomp profiles, AppArmor/SELinux, rootless containers, and privilege boundaries.
Familiarity with OCI specifications and container runtime internals.
Working knowledge of identity and access management concepts: OAuth 2.0, OIDC, token handling, and auth flows in desktop or cloud-adjacent contexts.
Comfort participating in security design reviews and threat modeling, even if security has not been your primary title.
Familiarity with vulnerability management processes: CVE triage, CVSS scoring, coordinated disclosure, and working with external reporters.
Strong written and verbal communication skills; comfortable bridging the gap between a dedicated security team and a product engineering team.
_______________________________________________________________________
WHAT TO EXPECT
FIRST 30 DAYS
You will onboard into the team and get hands-on with the Docker Desktop codebase, architecture, and development workflow. You will meet your counterparts in the central security organization and learn how vulnerability reports are currently handled. The goal is to listen, ask questions, and build a clear picture of the product’s current security posture, not to change anything yet.
FIRST 90 DAYS
You will be an active participant in design and code reviews, bringing a security lens to features in flight and landing your first security fixes in the codebase. You will have taken ownership of the vulnerability intake process, handling your first end-to-end triage cycles with minimal guidance. You will have a working relationship with the engineers on the team and a growing sense of where the most meaningful security investments should be made.
ONE YEAR OUTLOOK (FIRST YEAR)
You will be the team’s trusted authority on product security and a contributor to the codebase. You will have driven meaningful improvements to threat modeling practices, auth flows, container isolation defaults, or time-to-remediation, and shipped security improvements directly to the code. Your work will be directly visible in the security and resilience of a product used by millions of developers every day.
Visa sponsorship: Docker considers visa sponsorship on a case-by-case basis based on business needs.
_______________________________________________________________________
COMPENSATION & EQUITY
All full-time roles include equity. Final compensation is determined on factors including but not limited to experience, skills, qualifications, and location.
Canada: CA$271,150 – CA$434,000 base
United States: $194,150 – $312,950 base
Europe: €113,860 – €186,780 base
______________________________________________________________________
POSTING INFORMATION
Open vacancy: This posting is for an existing open role.
AI in hiring: Docker may use AI-assisted tools during our recruiting process.
Interview recordings: Candidates will be invited to opt in to interview recordings to support interviewer calibration and consistent evaluations. Recordings are optional and require explicit consent.
______________________________________________________________________
PERKS & BENEFITS
Remote-first by design – Work from your home, with offices in Seattle and Paris for connection and collaboration.
Flexibility that fits your life – We trust you to manage your schedule while delivering great work.
Time to recharge – Generous PTO, designated quarterly Whaleness Days, and a designated end-of-year Whaleness break.
Home office support – Set up your workspace for comfort and success.
Technology stipend – Equivalent to US$100 net per month to help support your work.
Learning & development – Annual stipend for conferences, courses, certifications, and continued learning.
Parental leave – 16 weeks of paid parental leave after six months of employment.
Equity for all full-time employees – Share in Docker's long-term success as we continue to grow.
Comprehensive benefits – Medical, retirement, and paid holidays vary by country.
Docker swag – Because representing the whale never gets old.
Docker is proud to be an equal opportunity employer. We are committed to building a team that reflects a broad range of backgrounds, experiences, and perspectives. We believe diverse teams build better products, make better decisions, and better serve our global community.
#LI-REMOTE
