5 months ago
Toronto, Canada +6 moreSenior
Responsibilities
- Partner with engineering and product teams from design through release to identify and address security risks
- Conduct threat modeling and security design reviews focused on authentication, authorization, and container runtime security
- Act as the liaison between the Desktop engineering team and the central security organization
- Validate, reproduce, triage, and coordinate remediation and disclosure of vulnerability reports and CVEs
- Review Go code for privilege escalation, insecure defaults, injection risks, and improper credential handling
- Contribute security improvements directly to the codebase
- Develop and maintain security documentation, guidelines, and runbooks
- Stay current on Linux container security and the evolving OCI ecosystem
Requirements
- 6+ years of experience in security engineering, application security, or a closely related discipline, with a senior- or staff-level track record
- Bachelor’s degree in Computer Science, Engineering, or a related field, or equivalent practical experience
- Strong proficiency in Go and ability to review and contribute to production-grade code
- Deep understanding of Linux container security, including namespaces, cgroups, capabilities, seccomp, AppArmor, SELinux, rootless containers, and privilege boundaries
- Solid understanding of OCI specifications and container runtime security, including runc, containerd, and BuildKit
- Hands-on experience with OAuth 2.0, OIDC, token handling, and authentication flows in desktop or cloud-adjacent contexts
- Experience with security design reviews, threat modeling, and secure development workflows
- Familiarity with CVE triage, CVSS scoring, coordinated disclosure, and external vulnerability reporters
- Strong written and verbal communication skills and ability to bridge security and product engineering teams
Benefits
- Remote-first culture with freedom and flexibility; offices in Seattle and Paris
- Quarterly Whaleness Days and an end-of-year Whaleness break
- Home office setup
- 16 weeks of paid parental leave
- Technology stipend of $100 net per month
- PTO plan
- Training stipend for conferences, courses, and classes
- Equity participation
- Medical benefits, retirement, and holidays varying by country
- Docker Swag
About Docker
Docker builds developer tools for building, sharing, and running containerized applications, including Docker Desktop, Docker Hub, Docker Scout, and the open-source Docker Engine. It monetizes through paid subscriptions for individuals, teams, and enterprises, along with security offerings such as Docker Hardened Images. Founded in 2013 and headquartered in San Francisco, the company serves over 20 million monthly users and supports more than 20 billion container image pulls.