Senior Security Engineer, Offensive Security
Docker · Remote · United States · Canada ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior Security Engineer
- Fully remote (global)
- Offensive security focus
- Python + Golang
- No visa sponsorship
Join Docker's globally distributed team to drive offensive security initiatives. You will test products and infrastructure against realistic adversarial scenarios to identify and eliminate attack paths before they are exploited.
Partner with engineering and product teams to integrate security into the design of Docker Desktop, Hub, and Scout. Your work will secure containerized environments and AI/ML workflows used by millions of developers worldwide.
What you'll do
- Plan and execute penetration tests and red-team engagements against products
- Develop proof-of-concept exploits and provide actionable remediation guidance
- Perform security reviews and threat modeling for architecture and code
- Build and maintain offensive security tooling and automation
- Serve on rotating on-call schedule for security incident response
- Collaborate with engineering to design security controls and architecture
- Educate cross-functional teams on security best practices
What you'll need
- 3+ years in security engineering with hands-on offensive experience
- 2+ years developing in Python or Golang
- Deep expertise in authentication, authorization, and Zero Trust
- Experience securing cloud ecosystems like AWS, GCP, or Azure
- Proficiency with Burp Suite, OWASP frameworks, and manual exploitation
- Understanding of AI/ML security risks such as prompt injection
- Holding certifications like OSCP, OSWE, or GPEN is preferred
Nice to have
- Experience with container escape and Kubernetes attack paths
- Published CVEs, original security research, or conference talks
- Experience testing AI/ML systems for data poisoning or extraction
- Track record of building security programs from scratch
Stack
- Docker Desktop
- Docker Hub
- Docker Scout
- AWS
- GCP
- Azure
- Kubernetes
- Python
- Golang
- Burp Suite
How you'll work
- Fully remote-first company
- Rotating on-call schedule required
- Flexible schedule management
- No visa sponsorship available
What you get
- Generous PTO and quarterly Whaleness Days
- 16 weeks paid parental leave after six months
- Monthly technology stipend of US$100 net
- Annual learning and development stipend
- Equity for all full-time employees
- Home office setup support
- Comprehensive medical and retirement benefits
Hiring process
- AI-assisted tools may be used in recruiting
- Optional interview recordings for calibration