Senior Security Engineer

At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started.

Come join us for a whale of a ride!

As a Senior Security Engineer
, you'll be a trusted advisor to engineering and product teams, ensuring security is built into every Docker product from the ground up. You'll partner with leadership to shape product security strategy, influence architectural decisions, and drive adoption of security controls across the organization.

You’ll apply your expertise in secure architecture, threat modeling, and vulnerability management to identify and mitigate risks early in the development lifecycle. Working across cloud infrastructure (AWS, GCP, Azure), containerized environments, and AI/ML products, you’ll implement proactive security solutions that scale with Docker’s growth.

This role offers the opportunity to build and mature security programs at a company whose products are trusted by millions of developers worldwide. You’ll work in a fast-paced, technically challenging environment where your security expertise directly impacts both Docker's platform and the broader container ecosystem.

• Work with leadership to align security initiatives with business goals, ensuring that security is a core component of product and infrastructure
• Take ownership and drive implementation for key programs such as vulnerability management, cloud governance, and product security
• Serve as a security subject matter expert for software security and architecture
• Partner with engineering to design and implement security architecture and controls across Docker products and platforms
• Perform security design reviews and threat modeling of emerging AI products
• Integrate security into SDLC through security requirements, design assessments, and automated security testing
• Manage Docker’s Vulnerability Disclosure Program (VDP) by validating submissions, and working with engineering to resolve confirmed issues
• Design and enforce security configurations in cloud environments (e.g. AWS, GCP, Azure) according to industry best practices
• Establish automated monitoring and alerting to detect security anomalies across our environments
• Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices
• Take part in on-call rotation for your team; respond to incidents, debug production issues, and drive continuous improvement of system reliability

• Have at least 5+ years of experience in security engineering roles, with a focus on application and infrastructure security, preferably in a cloud-native or SaaS environment
• Possess 3+ years of hands‑on development experience in Python or Golang
• Demonstrate deep expertise in authentication, authorization, including technologies like OAuth, SAML, OIDC, MFA, cryptography applications and Zero Trust principals.
• Have strong hands‑on experience with securing cloud ecosystems (e.g: AWS, GCP, Azure)
• Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks
• Have deployed runtime security solutions for threat detection and policy enforcement in Kubernetes, Docker environments
• Have a track record of building security programs and automations from scratch, applying risk‑based prioritization
• Have deployed runtime security solutions for threat detection and policy enforcement in Kubernetes, Docker environments
• Have an understanding of compliance regulations (e.g, SOC 2, ISO 27xxx, GDPR, CCPA, FIPS) and ability to align security with compliance requirements
• Have excellent communication skills, allowing you to explain complex security concepts clearly to technical and non‑technical stakeholders
• Understand industry standards, and actively keep up with emerging security technologies and models
• Are a team player who drives security change via collaboration…