2 days ago
Base Salary
$219k - $352k/yr
Responsibilities
- Lead multi-year technical vision and strategy for build security and software supply chain security across Docker products.
- Architect provenance, attestations, artifact signing, verification, policy enforcement, SBOM generation, dependency analysis, and vulnerability intelligence systems.
- Define secure developer experiences and integrations across local development, CI/CD pipelines, registries, platforms, and production deployment.
- Establish company-wide architectural principles and security standards while driving shared security primitives across products.
- Lead cross-company technical initiatives, make major architectural decisions, and partner with the SVP of Engineering and executive team.
- Mentor Staff and Principal engineers and raise the organization’s technical bar without directly managing people.
- Represent Docker’s security architecture through publications, conference talks, standards bodies, and technical community engagement.
- Participate in on-call rotations, respond to incidents, debug production issues, and improve system reliability.
Requirements
- 12+ years of software engineering experience specializing in build security, software supply chain security, or SDLC tooling.
- Deep knowledge of build-process threat models and mitigations involving dependencies, environments, artifacts, and pipelines.
- Architectural experience with artifact signing, attestations, SBOMs, dependency security, CI/CD security, base image trust, or vulnerability intelligence.
- Expertise in API design, service architecture, scalable system integration, and large-scale distributed systems.
- Experience with AWS, GCP, Azure, and modern infrastructure.
- Bachelor’s degree in Computer Science, Engineering, or equivalent practical experience.
- Track record of creating strategic technical plans, translating business strategy into architectures and roadmaps, and enabling enterprise revenue or expansion.
- Experience with enterprise security and compliance requirements, including SOC 2 and ISO 27001, and with security tooling procurement and operation.
- Ability to lead large cross-company initiatives, influence technical direction without direct authority, partner with executives, build consensus, and mentor senior engineers.
- Preferred qualifications include experience at a security, developer tools, or infrastructure software company; Docker or Kubernetes experience; enterprise billing and revenue recognition experience; legacy-system migration experience; open-source security contributions; recognized technical leadership; and an advanced degree.
Benefits
- Remote-first work from home with offices in Seattle and Paris for collaboration.
- Flexible scheduling, generous PTO, quarterly Whaleness Days, and an end-of-year Whaleness break.
- Home office support and a technology stipend equivalent to US$100 net per month.
- Annual learning and development stipend for conferences, courses, certifications, and continued learning.
- 16 weeks of paid parental leave after six months of employment.
- Equity for all full-time employees, comprehensive country-specific medical and retirement benefits, paid holidays, and Docker swag.
Categories
About Docker
Docker builds developer tools for building, sharing, and running containerized applications, including Docker Desktop, Docker Hub, Docker Scout, and the open-source Docker Engine. It monetizes through paid subscriptions for individuals, teams, and enterprises, along with security offerings such as Docker Hardened Images. Founded in 2013 and headquartered in San Francisco, the company serves over 20 million monthly users and supports more than 20 billion container image pulls.