Senior Security Engineer job opportunity at Docker.

Home Jobs In Canada Tag: Engineering Senior Security Engineer position at Docker


bot
Docker Senior Security Engineer
Experience: General
Pattern: full-time
Country:
apply Apply Now
Salary:
Status:

Engineering

Copy Link Report
degreeBachelor's (B.Sc.)
loacation Canada, Canada
loacation Canada....Canada

At Docker, we make app development easier so developers can focus on what matters. Our remote-first team spans the globe, united by a passion for innovation and great developer experiences. With over 20 million monthly users and 20 billion image pulls, Docker is the #1 tool for building, sharing, and running apps—trusted by startups and Fortune 100s alike. We’re growing fast and just getting started. Come join us for a whale of a ride! As a Senior Security Engineer , you'll be a trusted advisor to engineering and product teams, ensuring security is built into every Docker product from the ground up. You'll partner with leadership to shape product security strategy, influence architectural decisions, and drive adoption of security controls across the organization. You'll apply your expertise in secure architecture, threat modeling, and vulnerability management to identify and mitigate risks early in the development lifecycle. Working across cloud infrastructure (AWS, GCP, Azure), containerized environments, and AI/ML products, you'll implement proactive security solutions that scale with Docker's growth. This role offers the opportunity to build and mature security programs at a company whose products are trusted by millions of developers worldwide. You'll work in a fast-paced, technically challenging environment where your security expertise directly impacts both Docker's platform and the broader container ecosystem. Responsibilities: Work with leadership to align security initiatives with business goals, ensuring that security is a core component of product and infrastructure Take ownership and drive implementation for key programs such as vulnerability management, cloud governance, and product security Serve as a security subject matter expert for software security and architecture Partner with engineering to design and implement security architecture and controls across Docker products and platforms Perform security design reviews and threat modeling of emerging AI products Integrate security into SDLC through security requirements, design assessments, and automated security testing Manage Docker’s Vulnerability Disclosure Program (VDP) by validating submissions, and working with engineering to resolve confirmed issues Design and enforce security configurations in cloud environments (e.g. AWS, GCP, Azure) according to industry best practices Establish automated monitoring and alerting to detect security anomalies across our environments Serve on rotating on-call schedule to respond to security incidents, investigate threats, and coordinate remediation efforts Educate and collaborate with cross-functional teams (e.g., engineering, product) to promote security practices Qualifications Have at least 5+ years of experience in security engineering roles, with a focus on application and infrastructure security, preferably in a cloud-native or SaaS environment Possess 3+ years of hands-on development experience in Python or Golang Demonstrate deep expertise in authentication, authorization, including technologies like OAuth, SAML, OIDC, MFA, cryptography applications and Zero Trust principals. Have strong hands-on experience with securing cloud ecosystems (e.g: AWS, GCP, Azure) Understand AI/ML security risks and mitigations, including prompt injection, data poisoning, model extraction, and adversarial attacks Have deployed runtime security solutions for threat detection and policy enforcement in Kubernetes, Docker environments Have a track record of building security programs and automations from scratch, applying risk-based prioritization Have deployed runtime security solutions for threat detection and policy enforcement in Kubernetes, Docker environments Have an understanding of compliance regulations (e.g, SOC 2, ISO 27xxx, GDPR, CCPA, FIPS) and ability to align security with compliance requirements Have excellent communication skills, allowing you to explain complex security concepts clearly to technical and non-technical stakeholders Understand industry standards, and actively keep up with emerging security technologies and models Are a team player who drives security change via collaboration and cross-functional partnerships What to expect: First 30 days: Meet with security team and key partners across engineering Gain access to team owned systems, and internal documentation Complete security awareness training and compliance onboarding Review application architecture, tech stack and data flow Review risk registry and annual roadmap Familiarize oneself with team workflows and processes Shadow a fellow security engineer during their on-call/secops rotations First 90 days: Conduct security review on emerging Docker products Actively participate in architecture design reviews with the team Be the Tech Lead for a Security owned project/initiative Collaborate with Docker developers to validate and resolve discovered vulnerabilities Enhance incident response capabilities by participating in on-call rotation and post-incident activities Effectively manage submissions to our Vulnerability Disclosure Program (VDP) Create and maintain security documentation and runbooks First Year Outlook Execute security roadmap for improving security controls Strengthen Zero Trust architecture and least privilege access controls Enhance security monitoring and anomaly detection Perform security reviews for major product releases Conduct a penetration test or engage with external researchers Support audits and ensure compliance with SOC 2, ISO 27xxx Advocate for “security by design” in all product features Lead security awareness campaigns and company-wide security events Docker does not offer visa sponsorship for this role. We use Covey as part of our hiring and / or promotional process for jobs in NYC and certain features may qualify it as an AEDT. As part of the evaluation process we provide Covey with job requirements and candidate submitted applications. We began using Covey Scout for Inbound on April 13, 2024. Please see the independent bias audit report covering our use of Covey here . Perks Freedom & flexibility; fit your work around your life Designated quarterly Whaleness Days plus end of year Whaleness break Home office setup; we want you comfortable while you work 16 weeks of paid Parental leave Technology stipend equivalent to $100 net/month PTO plan that encourages you to take time to do the things you enjoy Training stipend for conferences, courses and classes Equity; we are a growing start-up and want all employees to have a share in the success of the company Docker Swag Medical benefits, retirement and holidays vary by country Remote-first culture, with offices in Seattle and Paris Docker embraces diversity and equal opportunity. We are committed to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our company will be. #LI-REMOTE

Other Ai Matches

Staff Software Engineer, Data Infrastructure Applicants are expected to have a solid experience in handling Engineering related tasks
Data Scientist, Data Insights Applicants are expected to have a solid experience in handling Engineering related tasks
Channel Operations Manager (UK&I) Applicants are expected to have a solid experience in handling Sales related tasks
Staff Developer Success Advocate Applicants are expected to have a solid experience in handling Marketing related tasks
Principal Software Engineer, AI Tools and Security (US West Coast) Applicants are expected to have a solid experience in handling Engineering related tasks
Senior Data Scientist, Data Insights Applicants are expected to have a solid experience in handling Engineering related tasks
Senior Program Manager, Data Privacy & AI Applicants are expected to have a solid experience in handling General & Administrative related tasks
Staff Backend Engineer, Secure Policy Applicants are expected to have a solid experience in handling Engineering related tasks
Senior Principal Software Engineer, Infrastructure Applicants are expected to have a solid experience in handling Engineering related tasks
Staff Program Manager, Engineering Operations (Production Readiness) Applicants are expected to have a solid experience in handling Engineering related tasks
Sales Operations Manager Applicants are expected to have a solid experience in handling Sales related tasks
Account Executive, Strategic Applicants are expected to have a solid experience in handling Sales related tasks
Senior Software Engineer, AI Tools and Security Applicants are expected to have a solid experience in handling Engineering related tasks
Senior Sales Engineer, Strategic Accounts (US West Coast) Applicants are expected to have a solid experience in handling Sales related tasks
Senior Software Engineer, Docker Agents (London) Applicants are expected to have a solid experience in handling Engineering related tasks
Senior Software Engineer, Backend Systems (US East Coast) Applicants are expected to have a solid experience in handling Engineering related tasks
Senior Software Engineer, Docker Agents (London or Paris) Applicants are expected to have a solid experience in handling Engineering related tasks
Senior People Partner, Engineering and Security (West Coast Preferred) Applicants are expected to have a solid experience in handling General & Administrative related tasks
Customer Experience Engineer, CXE Applicants are expected to have a solid experience in handling Sales related tasks
Strategic Partner Program Lead Applicants are expected to have a solid experience in handling Sales related tasks
Senior Support & Enablement Operations Analyst Applicants are expected to have a solid experience in handling Customer Success related tasks
Senior Solutions Engineer, Enterprise (US West/Central) Applicants are expected to have a solid experience in handling Sales related tasks
Senior Partner Sales Manager (UK & Ireland Preferred) Applicants are expected to have a solid experience in handling Sales related tasks