Senior Security Engineer, Docker Desktop
Docker · Remote · Canada · England · Portugal · Spain · Italy · Germany · United States ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Senior Security Engineer
- Fully remote
- Go + Linux internals
- Visa sponsorship possible
- Equity included
Join the Desktop engineering team as the primary security voice for Docker Desktop. You will bridge the gap between product engineers and the central security organization, ensuring secure development practices from design to release.
This hands-on role involves reviewing Go code, analyzing Linux kernel internals, and managing authentication flows. You will drive remediation for vulnerabilities and maintain security documentation for the team.
What you'll do
- Partner with engineering teams to identify security risks during design and code reviews
- Conduct threat modeling for authentication, authorization, and container runtime features
- Serve as liaison to the central security group and translate policy into engineering decisions
- Triage incoming vulnerability reports and CVEs, coordinating disclosure and remediation
- Review Go code for privilege escalation, injection risks, and credential handling issues
- Contribute security improvements directly to the codebase when appropriate
- Maintain internal security documentation, guidelines, and runbooks
- Participate in on-call rotation for support outside standard business hours
What you'll need
- 6+ years of experience in security engineering or application security at senior level
- Bachelor’s degree in Computer Science or equivalent practical experience
- Strong proficiency in Go for reviewing and contributing to production code
- Deep understanding of Linux fundamentals: namespaces, cgroups, seccomp, AppArmor
- Solid grasp of OCI specifications and container runtime security like runc and containerd
- Experience with identity and access management concepts including OAuth 2.0 and OIDC
- Proven ability to perform security design reviews and threat modeling
- Familiarity with vulnerability management processes such as CVE triage and CVSS scoring
Stack
- Go
- Linux
- Docker Desktop
- OCI
- runc
- containerd
- BuildKit
- OAuth 2.0
- OIDC
How you'll work
- Remote-first company with global distribution
- On-call rotation required for evenings, weekends, and holidays
- Flexible schedule management trusted by the team
What you get
- Generous PTO and quarterly Whaleness Days
- Home office support and monthly technology stipend
- Annual learning and development stipend
- 16 weeks paid parental leave after six months
- Equity for all full-time employees
- Comprehensive medical and retirement benefits vary by country
Hiring process
- AI-assisted tools may be used during recruiting
- Optional interview recordings available with explicit consent